Information Security

Description:

This role assists with design and implementation of cloud security posture management (CSPM) for KPMG Canada Cloud, by establishing design requirements in line with Cloud security framework. The role is expected to act as a subject matter expert for Microsoft Defender for Cloud & PRISMA CSPM vendor reviews and providing recommendations on securing new technologies and systems.

The role works alongside a team of IT security professionals such as technology and security architects while frequently interacting with the infrastructure team, architecture and implementation team.

What you will do:

• Security design and implementation of CSPM
• Collaborate with and provide recommendations while documenting them adequately.
• Provide assistance with KPI and playbook formulation for CSPM

• Decides the course of action to effectively implement CSPM strategy at KPMG in Canada- MS defender clean up and security configuration hardening for Azure

• PRISMA design and implementation for Azure and AWS as applicable

• Recommends courses of action to achieve a working CSPM framework
• Without effective and adequate CSPM and clean configurations, there is a rising risk of mis configurations in cloud that may lead to security incidents as it relates to Cloud environment
• Potential risk to Cloud compute workloads in KPMG Canada Cloud estate.
• Decisions are made in collaboration with others, and guided by established procedure but some degree of autonomy is required.
• This role is will need to ensure timely escalations and heads up in case there is lack of agreement with stakeholders

What you bring to this role:

• A university degree in mathematics or computer science or other related discipline.
• CCSP certification is a plus
• Security certification such as CEH, CISSP will be added advantage
• Security certification with Azure and AWS is needed
• Up to 5 years of IT security experience with 2 years in Cloud Security
• Strong hands-on, practical knowledge in Cloud Security engineering and posture management – products such as PRISMA and MS defender is a must have
• Working knowledge and understanding of the security industry practices and standards, specifically familiarity with ISO 27001 and NIST 800:53, CIS benchmarks is required