Talent.com
Senior Associate, Security Governance, Risk and Compliance (IPCR/ISO)
Senior Associate, Security Governance, Risk and Compliance (IPCR/ISO)KPMG • Winston-Salem, NC, United States
[error_messages.no_longer_accepting]
Senior Associate, Security Governance, Risk and Compliance (IPCR / ISO)

Senior Associate, Security Governance, Risk and Compliance (IPCR / ISO)

KPMG • Winston-Salem, NC, United States
[job_card.variable_days_ago]
[job_preview.job_type]
  • [job_card.full_time]
[job_card.job_description]

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.

KPMG is currently seeking a Senior Associate, Security Governance Risk and Compliance (IPCR / ISO) to join our Enterprise Security Services organization. This is a remote work opportunity.

Responsibilities :

  • Responsible for the execution of high-level compliance audits following the ISO 27001 and 42001 framework
  • Apply a thorough knowledge of risk, compliance, information security and privacy to develop and execute a multi-disciplined IT and Security Risk Management implementation plan, with the ability to enable leadership to make informed, risk-based decisions across disparate categories of risk, such as stability, operations, cyber, information handling, physical security, resiliency
  • Build and maintain trust-based relationships with peers and leaders; evaluate risk reduction and mitigation activities to continually drive towards risk reduction methodologies and analyze the impacts of key risks, define criteria to make risk tradeoffs, and make recommendations to leadership to minimize overall risk posture; defend KPMG security design and effectiveness capabilities to external entities, as needed
  • Evaluate the changing operating landscape and determine its impact on organizational risks, obligations, and external expectations. Recommend changes to risk approach to ensure consistency with current IT and security best practices.
  • Oversee work products and lead small to medium size projects, managing deadlines, expectations, and supervising the work performed by more junior staff; provide coaching, mentoring and feedback to such individuals and will serve as an informal performance manager of a team of junior employees
  • Thorough review audit workpapers for their quality, timeliness, completeness and accuracy; responsible for escalation requests for control evidence from identified control owners / operators; responsible for the timely collection, evaluation, acceptance or rejection and feedback of control evidence and artifacts thereof
  • Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications :

  • Minimum three years of recent experience in information technology (IT) audit within a large professional services environment (Big Four)
  • Bachelor's degree from an accredited college or university is preferred. Minimum of a high school diploma or GED required; relevant industry certifications, such as CISA, CISM, CISSP, ISO 27001 / 42001 Lead Auditor is preferred
  • Experience with ISO 27001 (Information Security and Privacy) an ISO42001 (Artificial Intelligence) evaluation of control, mitigating controls, identification of control deficiencies and facilitation of the remediation processes collaboration is preferred
  • Detail oriented with strong verbal and written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork, along with the ability to positively influence and be a credible source of knowledge to peers and other teams
  • Familiarity with the Public Company Accounting Oversight Board (PCAOB), SOC 1 / 2 / 3, AICPA, ISO, COBIT, CSA, ITIL and other related IT and Information Security Frameworks
  • Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
  • KPMG LLP and its affiliates and subsidiaries ("KPMG") complies with all local / state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work.

    Follow this link to obtain salary ranges by city outside of CA :

    California Salary Range : $82200 - $168200

    KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.

    KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.

    Los Angeles County applicants : Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

    [job_alerts.create_a_job]

    Associate Governance • Winston-Salem, NC, United States

    [internal_linking.related_jobs]
    Senior Director, Product - Managed Risk

    Senior Director, Product - Managed Risk

    Arctic Wolf Incident Response • Winston Salem, NC, US
    [job_card.full_time]
    Senior Director, Product - Managed Risk.At Arctic Wolf, we're not just navigating the cybersecurity landscape - we're redefining it. Our global team of dedicated Pack members is driving innovation a...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Management and Control ApplicationAll

    Management and Control ApplicationAll

    Tudor Investment Corporation • Winston Salem, NC, US
    [job_card.full_time]
    Management and Control Application.This group of intellectually curious professionals pay attention to details and work together to help the company succeed. We look for individuals who are starting...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Audit & Reimbursement III (US)

    Audit & Reimbursement III (US)

    Veterans Staffing • Winston Salem, NC, US
    [job_card.full_time]
    This role enables associates to work virtually full-time, with the exception of required in-person training sessions, providing maximum flexibility and autonomy. This approach promotes productivity,...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Associate Team Leader

    Associate Team Leader

    H&R Block • Salisbury, NC, US
    [job_card.full_time] +1
    At H&R Block, we believe in the power of people helping people.Our defining Purpose is to provide help and inspire confidence in our clients, associates, and communities everywhere.We also believe ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Information Systems Security Manager

    Information Systems Security Manager

    Summit Federal Services, LLC • Salem Winston, NC, US
    [job_card.full_time]
    [filters_job_card.quick_apply]
    Summit Federal Services, LLC (SFS) with headquarters in Oakland, Maryland, is a fast growing woman owned Small Business and HUBZone company with an outstanding record of performance providing more ...[show_more]
    [last_updated.last_updated_30]
    Supervisor, Risk Adjustment AuditingNewRemote - United States

    Supervisor, Risk Adjustment AuditingNewRemote - United States

    Datavant • Winston Salem, NC, US
    [job_card.full_time]
    We are committed to building a diverse team of Datavanters who are all responsible for stewarding a high-performance culture in which all Datavanters belong and thrive. We are proud to be an Equal E...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Global Services Tech Senior (Advance)

    Global Services Tech Senior (Advance)

    Ashley Furniture Industries • Advance, NC, US
    [job_card.part_time]
    Global Tech Services Engineering Senior.Join The #1 Furniture Company-Join The #1 Furniture Brand.Ashley Furniture Industries Inc. Established in 1945, Ashley offers one of the industrys broadest pr...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    BSA / AML / OFAC Compliance Auditor II

    BSA / AML / OFAC Compliance Auditor II

    Pathward • Winston Salem, NC, US
    [job_card.full_time]
    BSA / AML / OFAC Compliance Auditor II.Performs risk-based audits including operational, financial, compliance, and BSA / AML to enhance governance, risk management and control effectiveness.Assists in ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Sr. Audit Manager - Technology Governance & Risk Management

    Sr. Audit Manager - Technology Governance & Risk Management

    Truist • Winston Salem, NC, US
    [job_card.full_time] +2
    Truist Senior Audit Manager is responsible for providing a leadership role in the delivery of value-added independent and objective risk-based internal audit assurance and advisory services.The Sen...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Senior Compliance ManagerNewRemote

    Senior Compliance ManagerNewRemote

    Eqvilent • Winston Salem, NC, US
    [job_card.full_time]
    The Senior Compliance Manager will lead critical compliance projects and initiatives within our compliance framework.This role requires deep expertise in both financial markets regulation and techn...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Fraud Strategy Senior Manager

    Fraud Strategy Senior Manager

    Bitso • Winston Salem, NC, US
    [job_card.full_time]
    We are a diverse team that takes pride in understanding the perspectives of others.We fully embrace working remotely and we are eager to act, improve and accelerate progress inside and outside of o...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Compliance Specialist

    Compliance Specialist

    World Insurance • Winston Salem, NC, US
    [job_card.full_time]
    We're currently seeking a Compliance Specialist to support the firm's Compliance Program.You will report to Manager-Compliance Operations. Minimum two (2) years of Compliance and / or regulatory exper...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Strategic Partnerships Associate

    Strategic Partnerships Associate

    Sure • Winston Salem, NC, US
    [job_card.full_time]
    Strategic Partnerships Associate.Join Sure : Building the Rails of Digital Insurance.Founded in 2015, Sure is the insurance technology leader unlocking the potential of digital insurance.We're build...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Director - Compliance Operations (Secret Clearance Required)

    Director - Compliance Operations (Secret Clearance Required)

    Raytheon • Winston Salem, NC, US
    [job_card.full_time]
    Director Of Digital Compliance Operations.RTX is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwide.It comprise...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Renewal Risk Engineer - Management and Professional Liability (Southeast)Remote, Southeast (United States)

    Renewal Risk Engineer - Management and Professional Liability (Southeast)Remote, Southeast (United States)

    Counterpart • Winston Salem, NC, US
    [filters.remote]
    [job_card.full_time]
    Renewal Risk Engineer - Management And Professional Liability (Southeast).Counterpart is an insurtech platform reimagining management and professional liability for the modern workplace.We believe ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Sr Director, Pipeline Health & Governance

    Sr Director, Pipeline Health & Governance

    ConnectWise • Winston Salem, NC, US
    [job_card.full_time]
    Sr Director, Pipeline Health & Governance.ConnectWise is an industry and global leading software company with over 3,000 colleagues in North America, EMEA and APAC. As a community-driven software co...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Audit & Reimbursement III (US)

    Audit & Reimbursement III (US)

    Elevance Health • Winston-Salem, NC, United States
    [job_card.full_time]
    This role enables associates to work virtually full-time, with the exception of required in-person training sessions, providing maximum flexibility and autonomy. This approach promotes productivity,...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    cUAS Emerging Threat & Risk Analysis Team Lead

    cUAS Emerging Threat & Risk Analysis Team Lead

    Amyx • Winston Salem, NC, US
    [job_card.full_time]
    Counter-Uas Emerging Threat & Risk Analysis Team Lead.The Counter-UAS Emerging Threat & Risk Analysis Team Lead will direct a team responsible for identifying, assessing, and mitigating evolving un...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]