Jobs · Tennessee

Manager, Security Governance, Risk and Compliance

KPMG US · Knoxville, TN · 2 days ago
Hybrid$127k/yrFull-time
We need to output HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the posting. First paragraph: "Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services..." This is about the company, could be "About the role"? Actually "About the role" would be description of role. The posting includes a sentence: "KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization." That's about the role. Then responsibilities list. Thus we can have:

About the role

KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization.

Then responsibilities: list of bullet points. We need to extract responsibilities bullet list from text after "Responsibilities:" until "Qualifications:". The responsibilities text: "Lead technology, data, operations, artificial intelligence (AI), and cyber risk assessments; translate complex findings into actionable insights to enable leadership to make informed, risk-based decisionsDemonstrate deep proficiency in data risk management within the lines of defense (LoD) with a focus on data modeling, strategy, governance and management controlsEvaluate and recommend controls to mitigate risk and drive a risk-aware culture; ensure all recommendations align with firm policies and control standards to maintain risk within an acceptable appetiteAnalyze the impact of key risks and the evolving operating landscape; define criteria for risk tradeoffs and provide recommendations to leadership to optimize the organization's risk postureDevelop and maintain comprehensive risk and control matrices (RCMs) and risk registers; manage the end-to-end risk lifecycle, including identification, evaluation, and treatment planningBuild trust-based relationships with peers and senior leadership, collaborate with LoD partners to ensure internal audits and risk measures are accurately targeted toward high-impact areasAct with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment" It seems there are no punctuation between sentences; we need to split by semicolons? Actually each bullet likely separated by a capital letter after a period? The text is messy. We need to produce list items preserving substantive information. We can split by sentences where a capital letter starts after a period? Let's manually identify responsibilities: 1. Lead technology, data, operations, artificial intelligence (AI), and cyber risk assessments; translate complex findings into actionable insights to enable leadership to make informed, risk-based decisions 2. Demonstrate deep proficiency in data risk management within the lines of defense (LoD) with a focus on data modeling, strategy, governance and management controls 3. Evaluate and recommend controls to mitigate risk and drive a risk-aware culture; ensure all recommendations align with firm policies and control standards to maintain risk within an acceptable appetite 4. Analyze the impact of key risks and the evolving operating landscape; define criteria for risk tradeoffs and provide recommendations to leadership to optimize the organization's risk posture 5. Develop and maintain comprehensive risk and control matrices (RCMs) and risk registers; manage the end-to-end risk lifecycle, including identification, evaluation, and treatment planning 6. Build trust-based relationships with peers and senior leadership, collaborate with LoD partners to ensure internal audits and risk measures are accurately targeted toward high-impact areas 7. Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment We'll output as
  • each. Next, Qualifications section: after "Qualifications:" until maybe "Applicants must be authorized..." Actually there is a block: "Qualifications: Minimum five years of recent risk and compliance experience within a large professional services environment specializing in physical and cyber securityBachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; relevant industry certifications, for example CIA, CISA, CISM, CRISC, or CISSP are preferredDemonstrated understanding of disparate compliance frameworks and risk management principles, as well as experience making decisions to optimize overall operational riskAbility to analyze and synthesize technical data and convey it to non-technical audiencesUnderstanding of key business objectives and how to balance business objectives against IT risksStrong verbal/written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork, ability to positively influence, mentor and be a credible source of knowledge to less experienced team membersApplicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)" We need to separate into maybe Requirements and Qualifications? The instruction says use headings for sections like Requirements, Qualifications, Skills. We have qualifications block that includes experience, education, certifications, skills, etc. We could split into Requirements (experience, education, certifications) and Skills (communication, analytical, etc.) and maybe also include visa requirement as a note. But we must only create sections when there is real specific content. We have content for Requirements (experience, education, certifications). We have content for Skills (communication, problem solving, analytical, etc.). We also have Benefits and Pay sections: there is content about benefits and salary range. Let's extract benefits: after visa block, there is: "KPMG LLP and its subsidiaries (“KPMG”) complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work. Follow this link to obtain salary ranges by city outside of CA: https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=7467_9_26 California Salary Range: $127200 - $246900 KPMG offers a comprehensive compensation and benefits package." Thus we have Pay (salary range) and Benefits (description). Also Schedule maybe not explicitly given; there is mention of Personal Time Off, holidays, breaks but not standard work hours. Could infer schedule but not explicit. The instruction: never create Pay/Schedule/Benefits sections unless posting actually states them. It states benefits and salary range, so we can include Benefits and Pay sections. Schedule not explicitly stated; we have mention of Personal Time Off, holidays, breaks but not standard work hours; maybe we could include Schedule as "Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year." That mentions standard work hours but not specific. Might be considered schedule info. However safer to not create Schedule section unless explicit standard work hours given. The phrase "Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year." indicates that standard work hours exist but not given. I'd avoid Schedule. Thus sections: About the role, Responsibilities, Requirements, Qualifications (or Skills), Benefits, Pay. We need to decide between Requirements and Qualifications vs Skills. The posting lumps experience, education, certifications under Qualifications. Then later lists abilities like communication etc. Those could be Skills. So we can have:

    Requirements

    • Minimum five years of recent risk and compliance experience within a large professional services environment specializing in physical and cyber security
    • Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required
    • Relevant industry certifications, for example CIA, CISA, CISM, CRISC, or CISSP are preferred

    Skills

    • Demonstrated understanding of disparate compliance frameworks and risk management principles, as well as experience making decisions to optimize overall operational risk
    • Ability to analyze and synthesize technical data and convey it to non-technical audiences
    • Understanding of key business objectives and how to balance business objectives against IT risks
    • Strong verbal/written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork
    • Ability to positively influence, mentor and be a credible source of knowledge to less experienced team members
    We also have visa requirement: "Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)". This is a requirement; could be included under Requirements as an item. Add that as a requirement item. Now Benefits: we need to list benefits as
    • items. Extract bullet points: - variety of medical and dental plans - vision coverage - disability and life insurance - 401(k) plans - robust suite of personal well-being benefits to support mental health - Personal Time Off per fiscal year (depending on job classification, standard work hours, and years of service) - calendar of holidays observed each year - two breaks each year where employees will not be required to use Personal Time Off (one at year end, one around July 4th) We can phrase as items. Pay: California Salary Range: $127200 - $246900. Also mention that salary determined based on factors. We can include that as

      maybe but we need to use

      • for list of duties/requirements/benefits. Pay is not a list; we can use

        . The instruction: Use

        • for any list of duties/requirements/benefits, and

          for prose. So Pay section can have

          with the salary range info. Thus:

          Pay

          California Salary Range: $127,200 - $246,900 (actual offer based on skills, responsibilities, experience, degrees, certifications, market considerations).

          We need to preserve all substantive information; we should not lose the link to salary ranges by city outside of CA. Could include that as part of Pay prose: "See link for salary ranges by city outside of CA: https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=7467_9_26". That's substantive. Thus Pay paragraph includes that. Now About the role: we have the sentence. Could also include the earlier fl

Similar jobs