Cyber Strategy & Governance is one of the pillars in KPMG’s cyber security business, the others being Cyber Transformation, Defence and Response.
The Cyber Strategy & Governance team primarily assists clients to assess their cybersecurity risks and to develop and implement roadmaps and initiatives to manage the risks.
The CISO Advisory role involves:
- Advising CISOs across the financial and other sectors
- Developing thought leadership for CISOs and cyber security function
- Developing solutions to meet the CISO agenda
- Briefing boards and other execs on cyber security
- Leading major proposals and pitches
- Running large, complex or innovative projects, being hands-on
- Coaching and managing colleagues
- Working with our strategic alliance partners
- Working on strategic accounts
What are we looking for:
- A cyber security leader with experience across multiple cyber domains. Ideally, with operational experience in a CISO, or BISO function, and capable of designing and delivering CISO/CIO/CTO level solutions.
- More than ten years of professional experience, at least five years should be spent advising at CISO/CIO/CTO or similar level.
- Ability to lead CISO advisory projects, such as:
- CISO / CISO as a service
- Target operating models and lines of defence
- Policy and standards development
- Metrics and dashboard development
- Board / exec presentation and training
- Threat and risk assessments, including risk quantification
- Information and cyber security assessments (NIST, ISO 27001 etc)
- Remediation programmes and portfolio optimisation
- Security by design in transformation programmes
- Relevant certifications, e.g. CRISC, CISSP.
Interpersonal/other skills:
- Executive presence. You should be able to present to senior executives and make an impact.
- Leading others. You should be able to supervise, motivate and engage your team members. Ability to write in plain English. Most projects end with a report presented to the client; you will be expected to write sections of the report on the areas you have worked on in plain (business) English.
- Time management. It is common to work on several projects at the same time. You should be able to understand priorities and manage expectations when deadlines are these are not achievable.
- Leading self. You should be able to work by yourself towards your mid-term and long-term career goals. Your senior peers will provide coaching and mentoring.
