Specialist Director, Service Management Office (SMO) - Cyber Engagement
KPMG US · New York, NY · 1 mo ago
HybridConsultingFull-time
We need to output HTML fragment with sections for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. The posting includes a description about KPMG Advisory practice, then "KPMG is currently seeking a Specialist Director, Service Management Office (SMO) - Cyber Engagement to join our Managed Services practice." That's like an overview. Could be "About the role". Then responsibilities list (long). Then qualifications (minimum eight years...). Then certifications etc. Then skills (knowledge...). Then travel as required (maybe schedule? Not exactly). Then benefits and pay info: they mention salary ranges link, benefits package, etc. So we can include Benefits and Pay sections. Schedule: not mentioned except "Travel as required" and maybe standard work hours not given. So we should not create Schedule section if no specific content. Also we should not repeat job title as heading. We'll produce sections: About the role (overview paragraph), Responsibilities (ul), Qualifications (ul maybe with subpoints?), Skills (ul), Benefits (ul), Pay (p maybe with link). Need to preserve all substantive info; do not invent or summarize away detail. Must not include boilerplate like EEO, visa sponsorship details? Actually visa sponsorship info is substantive: "Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)". That's a requirement; could be part of Qualifications or Requirements. We'll include under Qualifications maybe as a bullet.
Also they mention "Travel as required" - could be under Requirements or Skills? Probably under Requirements.
We need to avoid duplication. Let's parse content:
- Intro paragraph about KPMG Advisory practice (first few sentences). That's about the role? We'll put as About the role.
- Then "KPMG is currently seeking a Specialist Director, Service Management Office (SMO) - Cyber Engagement to join our Managed services practice." That's also part of About the role.
- Then "Responsibilities:" followed by a long list of duties separated by semicolons. We'll split into bullet points.
- Then "Qualifications:" followed by bullet-like sentences: Minimum eight years..., Master's degree..., Certifications preferred..., Strong knowledge..., Strong analytical capability..., Demonstrated success..., Travel as required, Applicants must be authorized..., etc.
We need to decide sections: Qualifications (education, experience), Skills (knowledge, capabilities), maybe Requirements (travel, work auth). But the instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can include Requirements if we have specific content like travel authorization, work auth. But we also have Qualifications. Might be overlapping. Better to follow typical: Qualifications (education, experience, certifications), Skills (technical and soft skills), Requirements (travel, work authorization). However the posting lumps many under Qualifications. We'll split logically.
Let's extract:
Experience: Minimum eight years of recent progressive experience in cyber or IT service management, managed services, program leadership, or complex client delivery, including director-level or equivalent responsibility.
Education: Master's degree from an accredited college or university preferred; minimum of a Bachelor's degree in cybersecurity, information technology, engineering, business, or a related field is required.
Certifications preferred: ITIL 4 Managing Professional or Strategic Leader; PMP/PgMP; CISSP, CISM, or CRISC; Lean Six Sigma, COBIT, ISO/IEC 20000, ISO/IEC 27001, or relevant vendor credentials.
Knowledge: Strong knowledge of ITIL, ITSM operating models, service governance, SLA/KPI design, major incident, problem, change, and continual improvement practices; working knowledge of cyber domains such as security operations, identity, vulnerability management, cloud security, data protection, incident response, and resilience.
Analytical capability: Strong analytical capability and experience with service management and reporting platforms; ServiceNow and Power BI preferred; exceptional executive communication, facilitation, negotiation, and presentation skills.
Experience leading: Demonstrated success leading large, multi-tower engagements and globally distributed, matrixed teams; proven executive stakeholder, commercial, financial, contract, scope, transition, and transformation management experience.
Travel: Travel as required.
Work authorization: Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).
That seems like Requirements.
Now Benefits: They mention comprehensive competitive benefits package, medical/dental, vision, disability/life insurance, 401(k), personal well-being benefits, PTO, holidays, two breaks per year, link to benefits page.
Pay: They mention salary ranges link, mention that KPMG complies with local/state regulations regarding displaying salary ranges, offered salary based on factors, link to pay transparency. Also "KPMG offers a comprehensive compensation and benefits package." So we can include Pay section with paragraph about salary range link and that salary based on factors.
Schedule: Not mentioned besides standard work hours not given; we should not create Schedule.
Now About the role: The initial paragraph about KPMG Advisory practice and the seeking statement. We'll combine into a few sentences.
Let's craft About the role: "The KPMG Advisory practice is at the forefront of transformation, offering excellent opportunities for individuals to advance their careers and expertise. Looking ahead, we anticipate continued evolution and success within the practice, fostering both personal and professional development, thereby creating new pathways for growth. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our number one priority. With a wealth of learning and career development opportunities, a world-class training facility, and leading market tools, we help our people continue to grow both professionally and personally. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory. KPMG is currently seeking a Specialist Director, Service Management Office (SMO) - Cyber Engagement to join our Managed Services practice."
That seems fine.
Now Responsibilities: We need to break the long responsibilities into bullet points. The responsibilities text after "Responsibilities:" includes many clauses separated by semicolons. We'll split at each semicolon that starts a new clause, but ensure we keep meaning.
Let's copy responsibilities text:
"Own integrated service performance across cyber workstreams, geographies, and delivery partners, including quality, resilience, contractual outcomes, and value realization; serve as the senior operational interface among client executives, Engagement Partners, cyber leaders, and delivery teams; translate strategy and commitments into an actionable service roadmap; maintain executive visibility into service health, cyber risk, dependencies, financial performance, transformation progress, and required decisions; build trusted relationships with CISO, technology, risk, procurement, business, and engagement leaders; advise stakeholders on service maturity, operational resilience, cyber-risk priorities, transformation, and value realization; set expectations and communicate performance, risks, trade-offs, and opportunities clearly; convert client feedback into accountable improvement actionsDesign and operate the governance framework, including decision rights, escalation paths, controls, meeting cadence, and action tracking; lead service reviews, MBRs, QBRs, steering committees, transformation forums, and CISO-level updates; deliver concise executive reporting across SLAs/KPIs, incidents, backlog, capacity, financials, risks, dependencies, transformation, and value; lead and develop service and workstream leads across cyber towers, establishing clear accountability, performance expectations, and succession coverage; coordinate cross-tower priorities, dependencies, handoffs, and integrated delivery across onshore and offshore teams; drive collaboration across security operations, engineering, architecture, transition, transformation, commercial, finance, and risk functionsGovern SLAs, KPIs, operational-level agreements, experience measures, control indicators, thresholds, and data ownership; monitor service health across incidents, requests, problems, changes, vulnerabilities, security events, backlog, demand, capacity, and continuity; lead major-incident and escalation governance, including communications, root-cause analysis, corrective action, and post-incident review; use trend analysis, problem management, quality assurance, and service improvement plans to reduce recurrence, operational risk, and cost to serveEnsure compliance with Statements of Work, service levels, pricing assumptions, deliverables, acceptance criteria, and commercial obligations; partner with engagement and finance leaders on forecasting, budget, revenue protection, margin, productivity, and resource utilization; identify scope changes early and govern change requests through impact assessment, negotiation, approval, and execution; support sustainable engagement growth by identifying opportunities to improve services and expand valueGovern mobilization, transition, implementation, stabilization, and transformation through milestones, readiness criteria, stage gates, and acceptance measures; integrate steady-state operations with the transformation roadmap and track adoption, business outcomes, and sustained benefits; prioritize improvements in automation, reliability, ticket reduction, control effectiveness, knowledge management, and user experience; champion analytics, workflow automation, and responsible AI-enabled service management to improve insight, speed, quality, and efficiencyIdentify operational, cyber, delivery, regulatory, financial, and contractual risks; establish mitigation, contingency, and escalation plans; ensure alignment with security policies, control requirements, change governance, audit evidence, and regulatory obligations; lead resolution of issues affecting client operations, security posture, reputation, or contractual performance, with transparent executive communicationAct with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment"
We need to split into sensible bullet points. There are some missing spaces (e.g., "...actionsDesign" should be "actions. Design". We'll just treat as separate bullet.
Let's manually split:
1. Own integrated service performance across cyber workstreams, geographies, and delivery partners, including quality, resilience, contractual outcomes, and value realization.
2. Serve as the senior operational interface among client executives, Engagement Partners, cyber leaders, and delivery teams.
3. Translate strategy and commitments into an actionable service roadmap.
4. Maintain executive visibility into service health, cyber risk, dependencies, financial performance, transformation progress, and required decisions.
5. Build trusted relationships with CISO, technology, risk, procurement, business, and engagement leaders.
6. Advise stakeholders on service maturity, operational resilience, cyber-risk priorities, transformation, and value realization.
7. Set expectations and communicate performance, risks, trade-offs, and opportunities clearly.
8. Convert client feedback into accountable improvement actions.
9. Design and operate the governance framework, including decision rights, escalation paths, controls, meeting cadence, and action tracking.
10. Lead service reviews, MBRs, QBRs, steering committees, transformation forums, and CISO-level updates.
11. Deliver concise executive reporting across SLAs/KPIs, incidents, backlog, capacity, financials, risks, dependencies, transformation, and value.
12. Lead and develop service and workstream leads across cyber towers, establishing clear accountability, performance expectations, and succession coverage.
13. Coordinate cross-tower priorities, dependencies, handoffs, and integrated delivery across onshore and offshore teams.
14. Drive collaboration across security operations, engineering, architecture, transition, transformation, commercial, finance, and risk functions.
15. Govern SLAs, KPIs, operational-level agreements, experience measures, control indicators, thresholds, and data ownership.
16. Monitor service health across incidents, requests, problems, changes, vulnerabilities, security events, backlog, demand, capacity