Manager, Third Party Risk Inquires

We need to output HTML fragment with sections: About the role? The posting includes description about KPMG, but we need to follow rules: Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Include a section only when posting has real, specific content for it. Do not repeat job title as heading. Do not put Job ID etc. Remove boilerplate, navigation, legal, EEO, etc. Preserve all substantive information. We need to parse the posting: - Intro: "Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization." That's a description about the role/company. Could be "About the role" or "About KPMG". The instruction says use headings like About the role, Responsibilities, etc. So we can create an

About the role

with that paragraph. Then "Responsibilities:" followed by a list of responsibilities (multiple sentences). We need to format as

• each bullet. The responsibilities text: "Apply a thorough understanding of security to complete client-provided security questionnaires in an accurate, timely and consistent manner as well as establish and maintain effective business relationships with IT control owners throughout the firm Maintain and contribute to the Client Security Inquiry (CSI) Evidence Bank by gathering client-facing evidence in support of KPMG's controls from a wide variety of stakeholders inside and outside of ESS and IT Assist in the annual refresh process for CSI artifacts (SIG, whitepapers), successfully incorporating feedback from multiple stakeholders Help maintain the CSI workflow as documented through the ticket tracking system Collaborate with security and technology teams on various initiatives, projects, and strategies Assist the CSI team in preparing for client audits and assessments Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment" We need to split each line as a bullet. Then "Qualifications:" followed by qualifications list. We need to decide if we put under Requirements or Qualifications. The instruction includes both Requirements and Qualifications headings. We can use Qualifications heading for the list. The qualifications text includes multiple sentences, some are bullet-like but not separated by line breaks. We need to extract each qualification as separate bullet. Qualifications text: "Minimum five years of recent risk and compliance experience within a large professional services environment specializing in physical and cyber security Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; CISSP, CISA, or similar certification(s) preferred Experience in security and interactions with and support of clients within a large IT organization, preferably within a professional services firm or in a similar environment Familiarity with the AICPA Service Organizations Control reports and their purpose; be aware of concepts in Audit testing, evaluation of control evidence, identification of control deficiencies and facilitating the remediation processes; familiarity with NIST, ISO, HIPAA, GDPR, and other IT, Privacy and Information Security Frameworks and laws Strong problem solving, organizational and independent judgment skills to support an environment driven by customer service and teamwork and ability to build successful and productive relationships with peers Exceptionally strong reading, verbal and written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)" We need to preserve all substantive info. The visa sponsorship statement is substantive; we keep it. Then after qualifications, there is a paragraph about salary ranges: "KPMG LLP and its subsidiaries (“KPMG”) complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work. Follow this link to obtain salary ranges by city outside of CA: https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=7467_9_26 California Salary Range: $127200 - $246900 KPMG offers a comprehensive compensation and benefits package." We need to include Pay and Benefits sections only if posting actually states them. It does state salary range for California and mentions benefits. So we should have a Pay section with the salary range (maybe also note that it's location-based). And a Benefits section summarizing benefits described. We should not include generic filler like "commensurate with experience". The posting includes specifics: California Salary Range: $127200 - $246900. Also mentions link for salary ranges by city outside of CA. We can include that as part of Pay section. Benefits: mention medical/dental plans, vision, disability, life insurance, 401(k), personal well-being benefits, PTO, holidays, two breaks per year. Schedule: The posting mentions "Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year." Also mentions holidays and breaks. That's somewhat schedule-related but not explicit work hours. Could we create a Schedule section? The instruction says include a section only when posting has real, specific content for it. It does mention standard work hours (not specified) but mentions PTO, holidays, breaks. Might be enough for a Schedule section? However, we already have Benefits covering PTO etc. Might be redundant. Better to keep Benefits only, and not create Schedule unless explicit work hours/shift info. The posting does not state specific work hours (e.g., 40 hrs/week). So we skip Schedule. We also need to remove boilerplate: EEO statements, legal, etc. Remove lines about equal opportunity employer, visa sponsorship? Wait visa sponsorship is part of qualifications (must be authorized to work in US without sponsorship). That's substantive; we keep it. The EEO statement at end: "KPMG is an equal opportunity employer..." etc. That's boilerplate; remove. Also remove "No phone calls or agencies please." etc. Remove "KPMG recruits on a rolling basis." etc. Remove "Los Angeles County applicants: Material job duties..." etc. That's legal/Fair Chance; remove. Also remove "Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work." That's a link; maybe we can keep as part of Benefits? It's a reference; but it's not substantive detail; we could keep but it's more of a navigation. Probably drop. We need to preserve ALL substantive information; not invent or summarize away detail. So we must keep the salary range, benefits details, responsibilities, qualifications, about the role. We must not repeat job title as heading. So no

  Manager, Security Governance, Risk and Compliance

  . We need to output only HTML fragment, no /, no markdown. Thus final HTML:

  About the role

  Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization.

  Responsibilities

  • Apply a thorough understanding of security to complete client-provided security questionnaires in an accurate, timely and consistent manner as well as establish and maintain effective business relationships with IT control owners throughout the firm
  • Maintain and contribute to the Client Security Inquiry (CSI) Evidence Bank by gathering client-facing evidence in support of KPMG's controls from a wide variety of stakeholders inside and outside of ESS and IT
  • Assist in the annual refresh process for CSI artifacts (SIG, whitepapers), successfully incorporating feedback from multiple stakeholders
  • Help maintain the CSI workflow as documented through the ticket tracking system
  • Collaborate with security and technology teams on various initiatives, projects, and strategies
  • Assist the CSI team in preparing for client audits and assessments
  • Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

  Qualifications

  • Minimum five years of recent risk and compliance experience within a large professional services environment specializing in physical and cyber security
  • Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; CISSP, CISA, or similar certification(s) preferred
  • Experience in security and interactions with and support of clients within a large IT organization, preferably within a professional services firm or in a similar environment
  • Familiarity with the AICPA Service Organizations Control reports and their purpose; be aware of concepts in Audit testing, evaluation of control evidence, identification of control deficiencies and facilitating the remediation processes; familiarity with NIST, ISO, HIPAA, GDPR, and other IT, Privacy and Information Security Frameworks and laws
  • Strong problem solving, organizational and independent judgment skills to support an environment driven by customer service and teamwork and ability to build successful and productive relationships with peers
  • Exceptionally strong reading, verbal and written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork
  • Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S.