Specialist Director, Cloud Security

About the role

KPMG is seeking a Specialist Director, Cloud Security to join our Managed Services practice. This role provides strategic leadership for cloud security governance across AWS and Azure environments, including oversight of security posture, risk remediation, compliance, and continuous monitoring programs.

Responsibilities

• Lead enterprise cloud asset, firewall, and security exception governance programs, including inventory accountability, lifecycle management, policy compliance, risk acceptance, and regulatory oversight.
• Drive accountability across engineering, infrastructure, application, and business teams to prioritize and remediate material cloud security risks.
• Define and oversee cloud security KPI/KRI reporting, executive dashboards, risk committee materials, compliance metrics, and governance performance measures.
• Set the strategic direction for secure adoption of cloud and AI-enabled technologies by establishing security baselines, guardrails, policies, and control frameworks.
• Partner with cloud, cybersecurity, architecture, and business leaders to embed security into platform strategy, architecture decisions, and enterprise cloud transformation initiatives.
• Provide management coordination and oversight of Cyber Managed Services delivery across multiple engagements, ensuring high-quality service execution through effective collaboration with clients, KPMG stakeholders, and global delivery teams.
• Lead operational governance managed services, including incident, problem, and service request management, driving timely triage, escalation, resolution, stakeholder communications, and adherence to service level commitments.
• Oversee change and release management processes, operational escalations, and offshore/onshore delivery coordination, proactively managing risks, dependencies, resource requirements, and continuous service improvement initiatives.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

Qualifications

• Minimum of eight years of cybersecurity experience, including leadership in cloud security, governance, risk management, security operations, or cloud architecture within complex enterprise environments.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline from an accredited college or university.
• Experience providing strategic oversight for enterprise-scale AWS and Azure environments, including multi-account governance models and CSPM/CNAPP security programs.
• Experience leading enterprise vulnerability management, risk management, compliance, control governance, cloud security programs, executive reporting, and risk-based prioritization initiatives.
• Demonstrated ability to influence senior stakeholders, lead cross-functional remediation efforts, and drive measurable risk reduction across large-scale technology environments.
• Technical knowledge of AWS, Azure, IAM, Wiz, CSPM/CNAPP platforms, ServiceNow CMDB, firewall governance, Tufin, enterprise risk management, and security control frameworks.

Travel

Must be able to travel as needed based on business and client requirements.