National Information Technology Security Officer

Would you like to work with one of the biggest consulting firms in the world? Do you want to be involved in all questions regarding Information Technology security and contribute to enhancing KPMG’s security stance? If you work within IT Audit, Information Risk Management, or cyber security today, and want to take the next step in your carrier and develop in a vital internal function? Then this is one is for you!

About the role
Our internal Quality & Risk Management function is crucial for KPMG. We perform quality and risk controls, and our organization is looking for an IT Security Officer. This is a security leadership role. In this role you will have the mandate from local firm senior management and accountable to manage and oversee all aspects of information risk and security within the KPMG member firm. You will report to both the local senior leadership and KPMG's Global CISO.

You will have the authority to initiate and execute local information security efforts. Coordinate with other aspects of the business including Physical Security, Legal, HR, IT Operations, and the Privacy functions. You will serve as the single point of contact for all client information security queries and requirements regarding information protection topics.

You will be expected to lead information security initiatives including production of Information Security assessment reports, assessing Technology Solutions, responding to incidents and more. You will work with internal security engagements, information security policies, security aspects of project management, security governance frameworks and controls like ISO27001, NIST, GDPR, and more. You will carry out cyber security maturity assessments and appraisal of the effectiveness of compliance-related controls during annual internal audits.

We have a vision to further develop the Information Management functions within Quality & Risk to meet the growing number of assessment requests, legal and regulatory obligations and the ever-increasing volume of internal projects involving Information Security controls.
We believe that you who applies for this position has worked at least six years within the domain and has a background as an Information Security Manager or suitable experiences within Information and cybersecurity. Understanding IT-controls and processes and the ability to translate them into training for our business-units in a pedagogical way are key to this position. Furthermore, we think that you have:

- A Bachelor or Master’s degree, preferably with a technical orientation, and a strong drive to develop within this field.
- Relevant certification like CISSP and good knowledge in ISO 27001
- Competence in leading implementation and management of Information Security Governance, policies, and processes
- Excellent skills in written and oral communication in English is a must
- Experiences in writing security documentations like robust policies, processes, and procedures
- Solid foundations of computer networking, software engineering, Cloud security

We also believe that you can communicate clearly and positively. Being service-oriented and proactive will help you succeed. We believe that you are a great team-leader with an ability to multitask and take on different activities simultaneously.

What we offer
We offer you a diverse and challenging workplace where we collaborate and exchange expertise and knowledge. You are expected to participate in various internal and external trainings required to keep you up to date with policies and regulations.

Want to make a difference with us?
Applicants are advised to apply as soon as possible, but no later than 30th March 2023. Please attach your Resume and Cover Letter. If you have any questions regarding the recruitment process, please contact our Talent Manager Mikaela Bohman, mikaela.bohman@kpmg.se. For questions regarding the role, please reach out to Amit Gupta, National Information Technology Security Officer, amit.gupta@kpmg.se.

KPMG is a company for you who wants to make a difference. We are one of the worlds leading professional services companies and a reliant partner for our customers in the fast paced world they´re a part of - we convey insight and guidance on their journeys. It may be an organizational change for their company as a whole or parts of it and their ways of working, how to deal with potential risks, cyber threats or how to maximize the user experience in a digitalized world. We're also experts within analysis, M&A, audit and tax to name a few of our professions.

At KPMG, we work actively for diversity and gender equality throughout the organization. With diversity comes perspective that enriches our culture, as well as adds value to our clients and society as a whole. We believe in an inclusive culture where you can be yourself and where you are respected for who you are. This is at the core of what we believe in, and so, we welcome applicants with different backgrounds and experiences.

In Sweden we're around 1750 colleagues and a part of KPMG:s global network of more than 265 000 colleagues around the world.

Quality & Risk Management is a central part of KPMG's control function. We work with performing quality and risk controls and provides ongoing advice and support in ethics and independence to our employees in the business.