Senior Lead Consultant - Security Architecture and Risk Management

Senior Lead Consultant - Security Architecture and Risk

At KPMG, we offer fascinating, challenging and well rewarded careers.

At KPMG, we offer fascinating, challenging and well rewarded careers.




  • Subject Matter Expert for Security Design Orchestration and Security Risk Assessment activities
  • Performs security and/or risk assessments in a fast-paced environment along with providing timely and practical recommendations to mitigate the identified risks
  • Performs security design and architecture development
  • Leads discovery workshops with other consultants and key stakeholders, both in IT and other business units
  • Perform quality assurance on project deliverables (i.e. technical report, executive report, strategy & roadmap, etc.)
  • Leads project presentation for client project team and other key stakeholders
  • Leads project management and client management
  • Facilitates Security Training and Awareness
  • Assists the Director for Cyber in client pursuits, and presentation to client Senior/Executive Management
  • Leads pre-engagement and business development activities
    • Scoping/discovery meeting with clients
    • Development of proposal (technical and commercial) and presentation to clients
    • Adherence with company risk management guidelines on engaging with clients
    • Monitoring of pursuits from identification to engagement conversion 
    • Client Management all throughout the sales process


  • Has more than 8 years’ experience in Information Technology
  • Has more than 5 years’ combined experience in:
  • Security assessments (Vendor Security Risk Assessments, ISMS/NIST Assessment, SOC 2 Type 2 Assessment, RCSA, Configuration Review, Architecture Review, Controls Review) or in charge for the Security Risk Management Program
  • Security design and architecture development (Infrastructure, Apps and Data, Cloud), at least 2 years
  • Has more than 2 years’ experience in Project Management (or acted as Project Manager for more than 2 projects) (Preferred)
  • Has at least 2 years ‘experience in Business Development (Proposal development, Sales presentation, business case & portfolio development, etc.) (Preferred)
  • Specific 2 years ‘experience in consulting/advisory engagements (Preferred)
  • Working experience in Data Privacy (PDPA, GDPR, DPA of 2012)
  • Working experience in Security Awareness and Training
  • Working experience in cloud environment (AWS and Azure, preferred)
  • Strong knowledge on information security standards and guidelines such ISO 27001/2, NIST, CIS and CSA CCM
  • Understanding of Security Operations Center processes and relevant technologies
  • Understanding of Cloud Compute, Storage, Security and Virtualization best practice
  • Understanding of Enterprise Security Architecture and industry accepted framework such as SABSA
  • Understanding of local regulations; DPA of 2012, BSP Circulars
  • Good communicator and ability to interact with all levels within an organization (mandatory)
  • Good in technical writing and infographic reporting (mandatory)
  • Strong time management skills which allow for multi-tasking while managing shifting priorities
  • Proven history of providing exemplary customer service to both internal and external stakeholders
  • Preferably has at least one of the following certifications:
    • ISC2 CISSP
    • ISC2 CCSP
    • SABSA Certifications