Internal Technical Security Consultant

This role is within the Security Architecture Consultancy sub-team who provide specialist security advice collaborating with technical and business teams throughout the entire or part of a digital solution's life cycle. The team owns and develops Security Patterns, Security Specifications, and the Threat Modelling Framework, to support secure technology innovation in a changing threat landscape. The purpose of this role is to advise on the technical security aspects of business products that are considered, evaluated, developed and implemented by technology teams across KPMG UK. The Technical Security Consultant will:

• Lead as an internal consultant to an assigned Platform/Capability as part of our Centre of Excellence function providing technical security direction.
• Collaborate with programmes and projects to help deliver solutions that meet the business need, including any client contractual security requirements, and are compliant with the Enterprise Security Architecture principles - ensuring all applicable controls and patterns are implemented.
• Work alongside internal Design Authorities and Change Management functions to ensure all change initiatives are reviewed, supported, and aligned with Enterprise Security Architecture.
• Using threat modelling to provide risk or threat-based advice to programme stakeholders along with actionable recommendations where necessary.
• Manage the scoping of security testing requirements for new systems and products working closely with our Security Testing function.
• Provide support for risk assessment, security remediation, investigations, and vulnerability management as part of the wider Information Security team.
• Support the creation and review of design and guidance documentation where required.
• Support Enterprise Security Architecture by providing feedback from projects, including developing patterns and specifications in collaboration with Engineering teams.
• Work towards and achieve or extend professional certifications as part of personal development (e.g. security or Cloud Vendor certifications).
• Share experiences with others to assist their learning and understanding.
  
  + Infrastructure/Solution Architect
+ Technical Security Architect/Consultant + Security Operations + Secure application development
• Hands on experience and knowledge in securing digital products/solutions in the Cloud (e.g. AWS, Azure, and Google).
• Good understanding of Cloud, Application and SaaS security concepts, best practices, and industry standards.
• Good experience of working in an Agile software development environment.
• Be able to demonstrate the ability to adapt communication style to explain technical concepts to different people within an organisation whether advising stakeholders, directing teams, or sharing experience.
• Experience of successfully working in a fast paced, customer service/regulated environments, delivering high quality information security services.
• Be calm in challenging situations, able to navigate through complex security problems to find the root cause and a balanced outcome.
It would be advantageous if you can demonstrate some, or all of:
• Experience and knowledge of threat modelling, container/serverless platforms, modern application development processes, infrastructure/network security; security testing, and security tooling (e.g. SIEM, End Point Protection)
• Experience in securely configuring and managing any of SAP/Service Now/ Microsoft Dynamics/Sales Force.
• Any security certification (e.g. CISSP, CCSP, Microsoft).
  
  Technology is at the heart of what we do and part of the very DNA of our business. That's why we've invested in a single powerful team of connected technologists. 1,500 specialists, creating a step change in the way we work. Broader, deeper expertise, which is delivered to our clients faster than ever. Our connected solutions stretch across a range of specialisms too. From technology transformation, cyber and risk management through to security operations, data and analytics, automation, powered apps and Cloud. This is an opportunity to join a team that combines the entrepreneurial spirit and imagination of a start-up with the resources only a global network can provide. We're committed to simplified structures and are investing in workplace tools that enable us to collaborate and innovate whether you're working at home, in our office or at client sites.