Senior Consultant Cyber Security

About the Role

Join KPMG Canada’s Cybersecurity Strategy & Governance team as a Senior Consultant in Halifax, Nova Scotia. This role offers the opportunity to impact organizations' security measures by assessing cyber maturity, designing governance frameworks, and executing security strategies aligned with business goals. Collaborate with diverse clients to navigate complex cyber risk landscapes and enhance resilience in a digital age.

Key Responsibilities

• Perform cyber maturity and risk assessments applying various methodologies and frameworks.
• Develop and appraise cybersecurity strategies, governance models, and target operating structures.
• Prepare and assist in implementing cybersecurity roadmaps.
• Analyze cybersecurity financials to discover cost-saving opportunities.
• Evaluate capabilities of cybersecurity teams within organizations.
• Create cybersecurity control frameworks and conduct control testing to verify design, deployment, and effectiveness.
• Authorship of bespoke cybersecurity policies, standards, and guidelines reflecting organizational needs.
• Develop metrics and benchmarking tools for cybersecurity performance measurement.
• Design strategic dashboards to inform executive-level cybersecurity decision-making.
• Deliver advisory services concerning business and IT-related cyber risks.
• Communicate cybersecurity risk findings to a broad range of stakeholders.
• Support cyber training and awareness programs for client teams.
• Lead and participate in cybersecurity tabletop exercises.
• Develop and present communications of findings and recommendations to clients.
• Contribute to business development efforts including preparing RFP responses and proposals.
• Create and execute cyber resilience plans aimed at minimizing operational disruptions.

Candidate Profile

• Between 3 to 5 years of experience in cybersecurity-related projects or functions.
• A Bachelor’s degree in computer science or an equivalent technical background preferred.
• MBA or Master’s degree is considered an additional asset.
• Professional progress towards or holding certifications such as CISA, CISM, CISSP, or CIA, alongside ongoing IT technical skill enhancement.
• Knowledge of cybersecurity standards like ISO 27001, ISO 27002, ISO 27005, ISO 19011, and NIST frameworks.
• Experience in consulting environments or exposure to varied industry sectors is advantageous.
• Well-developed understanding of multiple industry sectors and business contexts.
• Self-motivated individual capable of prioritizing and adapting to evolving demands.
• Quick learner thriving in fast-paced workplace settings.
• Exceptional organizational abilities, keen attention to detail, and strong analytical mindset.
• Excellent communication skills, both written and verbal, facilitating effective stakeholder collaboration.
• Confident, enthusiastic, and highly driven personality.
• Availability and willingness to travel across Canada and internationally as needed.
• Client-centric approach with dedication to delivering high-quality and timely solutions.

Compensation and Benefits

The anticipated salary range for this position within the Ontario Region is between 73,500 and 122,500 CAD annually, with eligibility for additional bonuses. Compensation is influenced by factors such as geographic location, skills, competencies, and individual qualifications. KPMG offers a robust and competitive total rewards program.

Inclusion and Workplace Culture

KPMG values integrity, continuous learning, courage, respect for diversity, and making meaningful impacts. The company is committed to equitable, inclusive, and barrier-free workplaces, encouraging candidates to bring their full selves. Customized adjustments and accommodations are available throughout recruitment to support all applicants.

Use of Artificial Intelligence in Recruitment

KPMG employs AI tools to enhance candidate experience and streamline hiring processes; however, all hiring decisions are made by trained professionals. AI usage is governed by strict frameworks to ensure security and privacy, supporting human judgment rather than replacing it.