About the role

Cyber Security Incident Response Manager identifying and managing incidents for KPMG’s Global Information Security Services. Driving responses and collaboration with multiple global stakeholders to enhance data security posture.

Responsibilities

Manage cyber security incident response within KPMG’s Global Information Security Services (ISS) function.
Triage alerts reported by GSOC, Global functions and KPMGs network of member firms, including clients, supply chain and from Security tooling like DLP, CASB, XDR and SIEM.
Contribute to the investigation and response to cyber and data handling incidents, including misdirected emails, unauthorized data access, and policy violations.
Support containment, eradication, and recovery efforts for Cyber and data-related incidents.
Contribute to root cause analysis to determine the origin and impact of incidents.
Document incidents thoroughly and support preparation of detailed reports for internal stakeholders and regulatory bodies as required.
Collaborate with teams across Legal, HR, Compliance, Global Enterprise Technology (GET), Global Functions, RSD and key Member Firms to ensure appropriate incident handling and communications aligned to best practices.
Identify gaps in detection and response processes and recommend improvements.
Support the development and refinement of playbooks and standard operating procedures (SOPs) for cyber and data-related incidents.
Support security awareness initiatives related to data handling and incident management and reporting.

Proven experience in incident response, preferably with a focus on data protection and privacy incidents within highly regulated industries such as professional services, finance, healthcare, or energy.
Strong background in incident response, data protection, and regulatory compliance, with the ability to work cross-functionally to mitigate risks and enhance our data security posture.
Experience with email security, cloud platforms, and endpoint protection.
Strong understanding of DLP, CASB, SIEM, XDR and other security monitoring tools.
Proven ability to manage and/or support response to complex security incidents and data breaches.
Strong troubleshooting and problem-solving skills, with the ability to remain calm and effective under pressure.
Strong understanding of cyber and data risk factors impacting information security.
Familiarity with data protection regulations (e.g., GDPR, HIPAA, CCPA).
In-depth knowledge of cybersecurity regulations, standards, and best practices.
High level of integrity and professionalism, with a commitment to ethical conduct and confidentiality.
Ability to obtain and maintain security clearance where required.
Exceptional communication and interpersonal skills, with the ability to collaborate effectively across diverse global stakeholders.
Strong analytical skills with the ability to assess and mitigate risks and influence decision-making at senior levels.