Cyber Consultant

CIS Controls v8 Assessor

Responsibilities:

• Assess client organizations against the Center for Internet Security Critical Security Controls Version 8 framework.
• Apply strong working knowledge of CIS Controls v8 to evaluate cybersecurity maturity, identify gaps, and support assessment conclusions.
• Facilitate client walkthroughs, interviews, and evidence review sessions with stakeholders across technical and business functions.
• Communicate effectively with executive-level stakeholders, translating assessment findings, risks, and recommendations into clear business language.
• Navigate client questions during the assessment process and provide informed guidance aligned with CIS Controls v8 requirements.
• Collaborate with KGS teams responsible for preparing assessment deliverables and supporting documentation.
• Review, refine, and finalize the final assessment report for delivery to the client.
• Ensure final deliverables are accurate, professional, and aligned with client expectations and assessment objectives.
• Stay up-to-date with the latest cybersecurity trends, technologies, and threats
• Collaborate with cross-functional teams to ensure the integration of cybersecurity measures across all systems and processes
• Act with integrity, professionalism, and personal responsibility to uphold the firm’s respectful and courteous work environment.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field preferred, not required
• Proven experience as a Cyber Consultant, Cybersecurity Analyst, or similar role
• Strong knowledge of cybersecurity principles, frameworks, and best practices
• Familiarity with industry regulations and compliance standards (e.g., GDPR, HIPAA, ISO 27001)
• Experience with cybersecurity tools and technologies, such as firewalls, intrusion detection systems, and SIEM
• Strong analytical and problem-solving skills, with the ability to assess risks and propose effective solutions
• Excellent communication and interpersonal skills, with the ability to effectively communicate complex cybersecurity concepts to non-technical stakeholders
• Relevant certifications, such as CISSP, CISM, or CEH, are highly desirable

-----------------

KPMG LLP (“KPMG”) seeks a contractor in the United States to provide service to KPMG through one of our contracted employer/agency service providers. All applicants for any KPMG role are expected to act with integrity, professionalism, and personal responsibility to uphold the firm’s respectful and courteous work environment. All applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

Nothing herein shall be deemed to create an employer-employee relationship between contractor and KPMG, nor shall contractor be considered a representative or agent of KPMG.

KPMG LLP and its subsidiaries comply with all local/state regulations in regard to displaying pay rate ranges. The pay rate range(s) displayed is/are specifically for those contracted who will perform work in or reside in the location(s) listed, if selected for the role. Pay is determined based on a variety of factors including market data, ranges, applicant's skills and prior relevant experience, certain degrees and certifications (e.g. JD, technology), and specific location, for example. Additionally, applicants may be required to apply and become employed by a service provider utilized by KPMG, and final pay rate(s) and/or eligibility for additional benefits may be determined by such provider.

KPMG LLP, its subsidiaries, and its agency service providers (including, but not limited to, MBO Partners Inc., Magnit LLC, and TalentBurst Inc.) are equal opportunity employers/contractors. All qualified applicants are considered without regard to race, color, creed, religion, age, sex/gender, national origin, ancestry, citizenship status, marital status, sexual orientation, gender identity or expression, disability, physical or mental handicap unrelated to ability, pregnancy, veteran status, unfavorable discharge from military service, genetic information, or other legally protected status.

Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.