AI - Technical Security Consultant

KPMG-UnitedKingdom
London
11 months ago
Applications closed

Related Jobs

View all jobs

AI Security Engineer

AI Cyber Researcher

Senior AI Security Engineer (GenAI & LLM Protection)

Lead Software Engineer

Senior Software Engineer

Platform engineer

Job description

AI - Technical Security Consultant (Senior Manager)

Team

Security Architecture and Advisory (SAA) is a vital part of KPMG UK Cyber Security, a first line of defence team within the Enterprise-Wide Technology function. The SAA team plays a crucial role in assessing, developing and delivering innovative, secure digital solutions for KPMG, our clients, and audited entities. The SAA team is essential to KPMG's ability to demonstrate that we are delivering 'secure by design' digital solutions, building trust with our business stakeholders, customers, and regulators.

Role

This role is within the Security Architecture Consultancy sub-team, which provides specialist security advice in collaboration with technical and business teams throughout the entire or part of a digital solution's life cycle. The team owns and develops Security Patterns, Security Specifications, and the Threat Modelling Framework, to support secure technology innovation in a changing threat landscape.

We are seeking a highly motivated and skilled professional in the field of Artificial Intelligence (AI) security. The role will play a key part to help KPMG understand and manage the security risks with AI technologies - be that AI technologies KPMG consume or build ourselves. You will be responsible for providing technical security guidance and expertise to a wide range of stakeholders, ensuring the secure implementation and use of AI within KPMG.

In essence, the AI Technical Security Consultant acts as a bridge between the world of AI and the world of cyber security. They are responsible for ensuring that AI technologies are implemented and used securely, protecting both KPMG and our customers from potential risks.

The role is within an internal security team, with limited external client advisory.

Responsibilities

The AI Technical Security Consultant will:

Provide technical security guidance and expertise to KPMG internal staff on AI security best practices to protect AI digital solutions, models and data. Conduct security assessments of AI solutions and services. Contribute to and implement AI security policies and procedures. Work closely with other KPMG professionals, including data scientists, cybersecurity experts, and engineers to help with the secure development, build, use and maintenance of AI technology. Review the development and training processes of AI models & AI digital solutions to ensure they are secure and compliant. Working in conjunction with the Security Testing team, scope AI security testing to validate the robustness and security of AI systems. Evaluate and recommend AI security tools and technologies. Contribute to the development of new AI security tools and technologies (and roadmaps), collaborating with KPMG's internal engineering teams and Enterprise Security Architecture. Share knowledge and expertise within the team and across KPMG to educate staff on AI security risks and mitigation strategies. Stay abreast of the rapidly evolving AI landscape, including emerging threats and vulnerabilities. Contribute to the development of KPMG's AI security thought leadership - both locally within the UK and across other member firms globally.


Essential Experience
Bachelor's degree in a relevant field ( Cybersecurity, Data Science, AI)Deep understanding of AI technologies, including machine learning, deep learning, and natural language processing.Strong understanding of AI security tooling to help with the reduction of risk and governance of AI within an enterprise.Hands-on experience and knowledge in securing digital AI products/solutions in the Cloud ( AWS, Azure, and Google).Familiarity with Generative AI technology - such as Open AI.Familiarity with AI security frameworks, standards and regulatory requirements - such as OWASP AI publications, EU AI Act and ISO 42001.Familiarity with the UK Data Protection Act.A strong understanding of Cloud, Application, and SaaS security concepts, best practices, and industry standards.Demonstrated ability to adapt communication style to explain technical concepts to different audiences within an organization whether advising stakeholders, directing teams, or sharing experience.Experience of successfully working in a fast-paced, customer service/regulated environments, delivering high-quality information security services.Ability to work independently and as part of a team.Ability to remain calm in challenging situations, navigate complex security problems to find the root cause, and achieve a balanced outcome.
Desirable Experience
Master's degree in a relevant field ( Cybersecurity, Data Science, AI)AI-related certifications.Experience and knowledge of threat modelling, container/serverless platforms, modern application development processes, infrastructure/network security; security testing, and security tooling ( SIEM, End Point Protection)Providing AI Security advice within the Public sector.Experience working in an Agile software development environment.Proficiency in programming languages relevant to AI security (, Python, Java, C++).
#LI-AR1

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Careers

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.

Jobs

What Hiring Managers Look for First in Cyber Security Job Applications (UK Guide)

If you want to stand out in the highly competitive world of cyber security job applications, you need to understand what hiring managers look for before they even finish reading a CV. Cyber security hiring managers scan applications quickly and with specific priorities in mind. They assess not just your technical ability, but your judgement, professionalism, clarity, risk awareness and evidence of impact. This guide explains what hiring managers look for first in cyber security applications across roles like Security Analyst, Security Engineer, Penetration Tester, Incident Responder, Security Architect, Governance Risk and Compliance specialists and Cloud Security positions. Use this as a practical, step-by-step checklist to sharpen your CV, LinkedIn profile, cover letter and portfolio before you apply on www.cybersecurityjobs.tech .

Education

The Skills Gap in Cyber Security Jobs: What Universities Aren’t Teaching

Cyber security has become one of the most critical disciplines in the modern economy. From protecting financial systems and healthcare data to securing national infrastructure, cloud platforms and supply chains, cyber security professionals now sit at the frontline of digital trust. Demand for cyber security talent in the UK has surged. Job vacancies remain high, salaries continue to rise, and organisations across every sector report difficulty hiring skilled professionals. Yet despite this demand, many graduates struggle to break into cyber security roles and employers consistently report that candidates are not job-ready. The problem is not intelligence, ambition or academic effort. It is a persistent and widening skills gap between university education and real-world cyber security work. This article explores that gap in depth: what universities teach well, what they routinely miss, why the gap exists, what employers actually want, and how jobseekers can bridge the divide to build sustainable careers in cyber security.

🍪 We use cookies to enhance your browsing experience on our website. By continuing to use this site, you consent to the use of cookies as described in our Cookie Policy. You can review our Cookie Policy for more information.