Lead Specialist, Cloud Security

About the role

KPMG Advisory is at the forefront of transformation, offering excellent opportunities for career advancement and expertise development. We foster a collaborative, team-driven culture where adaptability is key. Our professionals benefit from a wealth of learning and career development opportunities, world-class training, and leading market tools to support both professional and personal growth. This role is part of our Managed Services practice, focusing on cloud security governance and risk management.

Responsibilities

• Manage cloud security posture across AWS and Azure environments, governing the review, prioritization, remediation, and reporting of security risks, misconfigurations, and compliance issues.
• Support secure adoption of cloud and AI-enabled services by implementing security baselines, guardrails, policies, and risk assessments across cloud platforms.
• Oversee cloud asset governance, including inventory accuracy, ownership accountability, lifecycle management, CMDB compliance, and visibility of unmanaged resources.
• Govern firewall security operations through Tufin and related platforms, ensuring policy compliance, risk reduction, audit readiness, and issue remediation.
• Manage cloud and firewall security exception processes, including risk acceptance, compensating controls, renewals, reporting, and regulatory compliance.
• Serve as a key liaison between cybersecurity, engineering, infrastructure, application, and risk teams to drive security governance and measurable risk reduction.
• Provide management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through collaboration with clients, KPMG stakeholders, and global delivery teams.
• Lead operational governance for managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments.
• Oversee change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum five years of recent cybersecurity experience, including cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments.
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
• Technical proficiency with AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, and Tufin.
• Experience supporting enterprise-scale AWS and Azure environments, including CSPM/CNAPP programs, multi-account governance models, and cloud security operating frameworks.
• Solid experience managing vulnerability management, compliance, exception governance, KPI/KRI reporting, and risk-based remediation programs.
• Demonstrated ability to influence stakeholders, coordinate cross-functional remediation efforts, and deliver measurable security and governance outcomes.
• Ability to travel as needed.
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG will not sponsor applicants for U.S. work visa status for this opportunity.

Pay

California Salary Range: $114,095 - $268,180. Salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications, and market considerations.

Benefits

• Comprehensive medical, dental, and vision plans.
• Disability and life insurance.
• 401(k) plans.
• Robust suite of personal well-being benefits to support mental health.
• Personal Time Off per fiscal year, based on job classification, standard work hours, and years of service.
• Two annual breaks where employees are not required to use Personal Time Off: one at year-end and another around the July 4th holiday.
• Holidays as published in the annual KPMG calendar.