Let’s get started
By clicking ‘Next’, I agree to the Terms of Service
and Privacy Policy
Jobs / Job page
Manager, Security Governance, Risk and Compliance image - Rise Careers
Job details

Manager, Security Governance, Risk and Compliance

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.KPMG is currently seeking a Manager, Security Governance, Risk and Compliance to join our Enterprise Security Services organization. This is a remote work opportunity.Responsibilities:• Apply a thorough knowledge of risk, compliance, as well as information security to develop and execute multi-disciplined technology, data, and security risk assessment/analysis, with the ability to enable leadership to make informed, risk-based decisions across disparate categories of risk, such as operations, cyber, information and data handling, physical and logical security, as well as resiliency• Identify and evaluate controls for risk reduction and mitigation activities to drive a risk-based culture, and apply a strong understanding of policies as well as control standards, while reviewing and recommending the development of controls to reduce risk to an acceptable level• Analyze the impacts of key risks, evaluate the changing operating landscape, define criteria to make risk tradeoffs, and make recommendations to leadership to minimize overall risk posture, taking into account organizational risks, obligations, and external expectations• Develop and maintain risk as well as control matrices, risk registers, and perform risk assessment/analysis including risk and control identification, analysis, evaluation, and recommend treatment plans• Create and present training material on risk, compliance (controls), best practices, methodologies and opportunities• Build and maintain trust-based relationships with peers and leaders across the Firm; work with second and third lines of defense to ensure organizational risk measures, and internal audits measure and evaluate the appropriate risk areasQualifications:• Minimum five years of recent experience in risk and compliance within a large professional services environment• Bachelor's degree from an accredited college or university is preferred; relevant industry certifications, such as Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP) are preferred• Demonstrated understanding of disparate compliance frameworks and risk management principles, as well as experience making decisions to optimize overall operational and cyber risk• Ability to analyze and synthesize technical data and convey it to non-technical audiences• Understanding of key business objectives and how they align with technology requirements• Strong verbal/written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork; ability to positively influence, mentor and be a credible source of knowledge to less experienced team members• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visaKPMG complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, the firm is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year the firm publishes a calendar of holidays to be observed during the year and provides two firmwide breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at “Benefits & How We Work”.Follow this link to obtain salary ranges by city outside of CA:https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=7467_9_25California Salary Range: $101200 - $215100KPMG LLP (the U.S. member firm of KPMG International) offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.KPMG does not currently require partners or employees to be fully vaccinated or test negative for COVID-19 in order to go to KPMG offices, client sites or KPMG events, except when mandated by federal, state or local law. In some circumstances, clients also may require proof of vaccination or testing (e.g., to go to the client site).KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Average salary estimate

Estimate provided by employer
$157500 / ANNUAL (est.)
min
max
$150K
$165K

If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.

What You Should Know About Manager, Security Governance, Risk and Compliance, KPMG US

If you're a seasoned professional passionate about security governance, risk management, and compliance, KPMG has the perfect opportunity for you! We're currently on the lookout for a Manager, Security Governance, Risk and Compliance to join our dynamic Enterprise Security Services team in Boston, MA. This remote-friendly position is all about empowering our leadership to make informed, risk-based decisions across various areas including operational, cyber, and data security. In this role, you'll dive deep into risk assessment and develop tailored strategies that promote a risk-aware culture within the firm. Your experience and insights will be crucial in identifying and evaluating controls for risk mitigation, tackling everything from compliance frameworks to organizational obligations. As you analyze key risks and present your findings, you’ll foster collaboration and build trust with peers and leaders alike. Here at KPMG, we don't just look for qualifications; we value innovative thinkers who are eager to share their knowledge and mentor less experienced team members. Apply now, and let's shape the future of security governance together!

Frequently Asked Questions (FAQs) for Manager, Security Governance, Risk and Compliance Role at KPMG US
What are the main responsibilities of a Manager, Security Governance, Risk and Compliance at KPMG?

As a Manager, Security Governance, Risk and Compliance at KPMG, you'll be responsible for conducting thorough risk assessments, developing risk reduction strategies, and creating effective compliance frameworks. Your role also includes analyzing impacts of key risks, developing training materials, and building strong relationships across the organization to ensure effective risk management practices are being upheld.

Join Rise to see the full answer
What qualifications are necessary to apply for the Manager, Security Governance, Risk and Compliance position at KPMG?

To qualify for the Manager, Security Governance, Risk and Compliance position at KPMG, applicants should ideally possess a Bachelor's degree and at least five years of recent experience in risk and compliance within a large professional services environment. Preferred qualifications include certifications such as CIA, CISA, CISM, CRISC, or CISSP, highlighting a strong understanding of risk management principles and compliance frameworks.

Join Rise to see the full answer
What skills do I need to succeed as a Manager, Security Governance, Risk and Compliance at KPMG?

Success as a Manager, Security Governance, Risk and Compliance at KPMG requires strong analytical skills, excellent communication abilities, and a deep understanding of compliance frameworks. Additionally, essential skills include the ability to synthesize complex technical data for non-technical audiences, problem-solving abilities, and experience in building trust-based relationships within a corporate environment.

Join Rise to see the full answer
Is remote work available for the Manager, Security Governance, Risk and Compliance role at KPMG?

Yes, the Manager, Security Governance, Risk and Compliance position at KPMG is designed to be remote-friendly, allowing for flexibility in your work environment. KPMG supports a culture that embraces individual growth while promoting a balanced work-life dynamic.

Join Rise to see the full answer
What does KPMG offer in terms of employee benefits for the Manager, Security Governance, Risk and Compliance position?

KPMG offers a comprehensive benefits package for the Manager, Security Governance, Risk and Compliance role that includes various medical and dental plans, vision coverage, disability and life insurance, and a 401(k) plan. Additionally, KPMG provides generous Personal Time Off and a range of personal well-being benefits to support your mental health and work-life balance.

Join Rise to see the full answer
Common Interview Questions for Manager, Security Governance, Risk and Compliance
Can you explain the risk management frameworks you've worked with?

When preparing for this question, detail specific frameworks you have applied in past roles, emphasizing how you analyzed and implemented them to improve security governance and compliance. Highlight your experience with frameworks such as NIST, ISO, or COBIT, and be ready to discuss the outcomes of your efforts.

Join Rise to see the full answer
How do you approach risk assessment within a large organization?

In your response, outline a systematic process for risk assessment that includes identifying risks, assessing their impact and likelihood, and formulating mitigation strategies. Consider mentioning team collaboration and stakeholder communication as key components of your assessment approach.

Join Rise to see the full answer
Describe a time when you identified a major risk. What steps did you take?

Provide a real example that illustrates your problem-solving skills in action. Highlight the risk identified, your analysis process, the recommendations you made, and how these influenced decision-making. Make sure to cover the positive outcome that resulted from your actions.

Join Rise to see the full answer
What tools do you use for risk management and compliance analysis?

Discuss specific tools or software you have utilized in risk management and compliance tasks, such as GRC tools or risk assessment software. Explain how these tools enhanced your efficiency and informed your decision-making process.

Join Rise to see the full answer
How do you ensure effective communication of risk findings to non-technical stakeholders?

Focus on your ability to translate technical language into clear, understandable insights. Provide examples of how you've presented complex information to non-technical stakeholders, such as through reports, executive summaries, or live presentations.

Join Rise to see the full answer
What role does training play in risk and compliance management?

Emphasize the importance of training in fostering a risk-aware culture. Discuss how you have created or facilitated training sessions aimed at educating staff on compliance procedures, risk assessment practices, or security best practices.

Join Rise to see the full answer
How do you handle competing priorities in risk management?

Articulate your approach to prioritization in project management. Share techniques you use, such as risk scoring, stakeholder analysis, and leveraging team strengths, to ensure timely and efficient completion of high-priority tasks.

Join Rise to see the full answer
What strategies do you use to stay updated with compliance regulations?

Talk about your commitment to continuous learning in this field. Mention resources you use—such as industry publications, webinars, or professional networks—and how you implement newfound knowledge into your compliance practices.

Join Rise to see the full answer
Can you give an example of how you've built trust with cross-functional teams?

Share specific instances where you've collaborated with other departments or teams, outlining strategies you've employed to foster trust, such as transparent communication, reliability, and demonstrating respect for their input in risk assessments.

Join Rise to see the full answer
Why do you want to work at KPMG as a Manager, Security Governance, Risk and Compliance?

Reflect on KPMG's strong reputation and culture as an organization. Emphasize components that align with your values, such as innovation, growth opportunities, and commitment to community service. Share how your skills and vision match KPMG's goals.

Join Rise to see the full answer

KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. With 90 offices and more than 29,000 employees and partners throughout the US, we’re leading the industry in new ...

212 jobs
MATCH
Calculating your matching score...
FUNDING
SENIORITY LEVEL REQUIREMENT
TEAM SIZE
EMPLOYMENT TYPE
Full-time, remote
DATE POSTED
March 21, 2025

Subscribe to Rise newsletter

Risa star 🔮 Hi, I'm Risa! Your AI
Career Copilot
Want to see a list of jobs tailored to
you, just ask me below!