Role overview
KPMG Australia is part of a global network providing extensive services across a wide range of industries and sectors. Our people collaborate, share their expertise, and create innovation as we partner with clients to solve complex challenges, empower change, drive disruption and growth. We look for talented people with the potential to make an extraordinary difference for our clients, our firm, and our communities.
KPMG’s Technology & Information Risk Management is your opportunity to be part of a team on the rise! Rapidly growing with many competent individuals with various technical backgrounds, the Security Risk team supports business stakeholders in bringing their ideas to life while helping them to shape the future of the firm, by exploring and embedding new forms of growth.
What you'll work on
- Identifying and Managing Risks: The analyst helps in identifying and managing cyber security and other technology and information risks. This involves performing threat assessments to identify potential risks to the business and determining the preventative controls in place.
- Enhancing Business Resilience: The analyst contributes to enhancing the organisation's business resilience by reviewing and recommending effective controls over technology assets. This helps in building the organisation's resilience and strengthening core controls to meet the challenges of technology and information risks.
What we're looking for
- Evaluate a range of systems, applications, and software throughout KPMG Australia to determine cyber security status and develop plans for improvement.
- Analyse architectural documentation of systems, solutions, and applications with a focus on cyber security.
- Provide insightful cyber security reporting to local IT leaders as well as regional and global executives, occasionally taking the lead role in this area.
- Offer expert risk assessment and advice during the acquisition process and when integrating third-party solutions, technologies, and services.
- Propose security measures that effectively balance risk mitigation while remaining aligned with the scale of potential threats.
- Champion projects aimed at strengthening the firm’s security framework, seeking innovative methods to evaluate state-of-the-art technologies, including artificial intelligence, blockchain, quantum computing, among others.