Jobs

Internal Technical Security Consultant


Job details
  • KPMG-UnitedKingdom
  • Birmingham
  • 3 weeks ago
Applications closed

Job description

Technical Security Consultant - 105965

Base Location:Hybrid/UK based (core office in London) plus network of 20 offices nationally:

The KPMG EWT function is a cornerstone of our business. We do work that matters to our local business and communities - supporting technical innovation and adoption of cutting-edge solutions across the UK. Working on complex engagements in enterprise technology this team is responsible for the delivery of cutting-edge technical solutions and trusted to get it right first time.

KPMG is one of the world's largest and most respected consultancy businesses, we've supported the UK through times of war and peace, prosperity and recession, political and regulatory upheaval. We've proudly stood beside the institutions and businesses which make the UK what it is.

Why join KPMG EWT as a Technical Security Consultant?

Security Architecture and Advisory (SAA) is part of KPMG UK Cyber Security, a first line of defence team within the Enterprise-Wide Technology function. The SAA team are critical in the assessment, development, and delivery of innovative, secure digital solutions for KPMG, our clients, and audited entities. The SAA team is vital to KPMG's ability to demonstrate that we are delivering 'secure by design' digital solutions so that our business stakeholders, our customers, and our regulators trust KPMG.

This role is within the Security Architecture Consultancy sub-team who provide specialist security advice collaborating with technical and business teams throughout the entire or part of a digital solution's life cycle. The team owns and develops Security Patterns, Security Specifications, and the Threat Modelling Framework, to support secure technology innovation in a changing threat landscape. The purpose of this role is to advise on the technical security aspects of business products that are considered, evaluated, developed and implemented by technology teams across KPMG UK.

What will you be doing?

Lead as an internal consultant to an assigned Platform/Capability as part of our Centre of Excellence function providing technical security direction. Work alongside internal Design Authorities and Change Management functions to ensure all change initiatives are reviewed, supported, and aligned with Enterprise Security Architecture. Collaborate with programmes and projects to help deliver solutions that meet the business need, including any client contractual security requirements, and are compliant with the Enterprise Security Architecture principles - ensuring all applicable controls and patterns are implemented. Using threat modelling to provide risk or threat-based advice to programme stakeholders along with actionable recommendations where necessary. Manage the scoping of security testing requirements for new systems and products working closely with our Security Testing function. Provide support for risk assessment, security remediation, investigations, and vulnerability management as part of the wider Information Security team. Support the creation and review of design and guidance documentation where required. Support Enterprise Security Architecture by providing feedback from projects, including developing patterns and specifications in collaboration with Engineering teams. Work towards and achieve or extend professional certifications as part of personal development ( security or Cloud Vendor certifications). Share experiences with others to assist their learning and understanding.

What will you need to do it?
Have worked in at least one of: Infrastructure/Solution Architect, Technical Security Architect/Consultant, Security Operation, Secure application developmentHands on experience and knowledge in securing digital products/solutions in the Cloud ( AWS, Azure, and Google).Good understanding of Cloud, Application and SaaS security concepts, best practices, and industry standards.Good experience of working in an Agile software development environment.Be able to demonstrate the ability to adapt communication style to explain technical concepts to different people within an organisation whether advising stakeholders, directing teams, or sharing experience.Experience of successfully working in a fast paced, customer service/regulated environments, delivering high quality information security services.Be calm in challenging situations, able to navigate through complex security problems to find the root cause and a balanced outcome.
Skills we'd love to see/Amazing Extras:
Experience and knowledge of threat modelling, container/serverless platforms, modern application development processes, infrastructure/network security; security testing, and security tooling ( SIEM, End Point Protection)Experience in securely configuring and managing any of SAP/Service Now/ Microsoft Dynamics/Sales Force.Any security certification ( CISSP, CCSP, Microsoft).
Our Locations:

With 20 sites across the UK, we can potentially facilitate office work, working from home, flexible hours, and part-time options. If you have a need for flexibility, please register and discuss this with our team.

Find out more:

Within Consulting we have a range of divisions and specialisms. Click the links to find out more below:
Consulting at KPMG:ITs Her Future Women in Tech programme:KPMG Workability and Disability confidence:
For any additional support in applying, please click the links to find out more:
Applying to KPMG:Tips for interview:KPMG values:KPMG Competencies:KPMG Locations and FAQ:

Sign up for our newsletter

The latest news, articles, and resources, sent to your inbox weekly.

Similar Jobs

Information Security Consultant

OverviewNorth builds stronger networks and creates smarter places. Our intelligent technology solutions and robust network infrastructures transform the way people, places, and organisations work. And we focus our expertise on working in three specialist sectors: public services, enterprise & data centres, and defence & justice.North is looking to appoint a...

Camberley

Principal Security Consultant - OT/IoT

DescriptionMethods is a £100M+ IT Services Consultancy partnering with a range of central government departments and agencies to transform the way the public sector operates in the UK. Established over 30 years ago and UK-based, we apply our skills in transformation, delivery, and collaboration from across the Methods Group, to...

Methods Business and Digital Technology London

GRC Consultant

Job DescriptionThe team you'll be working with:The GRC Consultant (Cyber Assurance / Security Operations Manager) is primarily responsible for ensuring the security controls (people, process, technology) are in place and operating as designed. The primary aim is the design, development, test and evaluation of information security throughout its lifecycle. This...

NTT DATA London

Interim IT Security Consultant

Interim IT Security Consultant6 months | £550 - £650pdOutside IR35 | LeedsWe are seeking an interim IT Security Consultant to support our strategic and operational initiatives to safeguarding our organisation’s digital assets. This requires both technical expertise within the security domain to support our vulnerability and incident management processes as...

Leeds

Graduate Cyber Security Consultant

DescriptionWe will provide you with a fantastic springboard into a consulting career with client engagement and project work the norm from the start.  You will gain experience in a manner that will provide the right level of support to ease the transition from an academic environment, whilst enabling you to...

Actica Consulting London

Senior Cloud Security Consultant

A Senior Cyber Security Consultant is crucial to engaging with our customers to improve their security posture through consultative and technical engagement. As a Senior Consultant within the team, you will be expected to work with customers and assess their Cyber Security Risk (among People, Process, Technology) and recommend and...

ANS Manchester