The NITSO Security professional will support day‑ to day information security operations with a strong focus on Data Loss Prevention (DLP) incident monitoring and investigation, risk-based decisioning, and governance ensuring adherence to firm-wide information security, risk, and compliance policies across systems, users, and processes.
Key Responsibilities
- Monitor, review, and investigate DLP alerts and data leakage incidents across systems and email platforms.
- Validate document classification and assess data risk in line with firm policies.
- Engage with users and reporting managers to obtain clarifications, justifications, and supporting evidence.
- Ensure compliance with client, onshore, and firm-wide data security requirements.
- Recommend appropriate remediation actions, warnings, or escalations based on incident severity.
- Maintain accurate documentation, audit trails, and incident records.
- Track incident life-cycle and closure within defined SLA and support management reporting.
- Collaborate with HR, NITSO, Advisory, IT, and Risk/QRM stakeholders to enable effective risk management.
- Follow up on user responses and required information to enable timely incident resolution.
- Support day to day DLP monitoring and investigations by reviewing alerts, validating incidents, and assisting with evidence collection under defined procedures.
- Contribute to timely incident triage and documentation, ensuring cases are accurately logged, tracked, and closed in line with SLAs and governance requirements.
- Assist senior team members in analyzing data classification, user intent, and incident impact to differentiate true violations from false positives.
- Maintain clear and consistent investigation records to support audits, risk reviews, and compliance reporting.
- Support reporting and dashboards by helping track volumes, trends, and recurring issues in DLP incidents.
- Collaborate effectively with cross‑functional teams (security, IT, HR, and business users) by following guidance and escalating issues appropriately.
- Continuously build technical and analytical skills in DLP tools, security monitoring, and incident response processes.
- Strengthen the firm’s data protection posture by identifying trends, recurring risk patterns, and control gaps from DLP incidents, and recommending measurable improvements.
Bachelor’s degree in Information Security, Risk Management, IT, or a related discipline, with typically 2–5 years of experience in Information Security, Risk, or Compliance roles.
KPMG – це міжнародна мережа фірм, що надають аудиторські, податкові та консультаційні послуги. В офісах KPMG у 143 країнах світу працюють понад 273,000 співробітників (FY23). Кожна фірма KPMG є незалежною юридичною особою і представляє себе як таку.
KPMG працює в Україні з 1992 року. KPMG в Україні надає аудиторські, податкові, бухгалтерські та консультаційні послуги для місцевих і міжнародних компаній. Нашою метою завжди було використання глобального інтелектуального потенціалу фірми в поєднанні з практичним досвідом наших українських професіоналів, щоб допомогти провідним компаніям досягти своїх цілей.
Офіси компанії знаходяться у Києві та Львові.
______________
KPMG is a global network of professional services firms providing audit, tax and advisory services. We operate in 143 countries and territories, and in FY23, collectively employed more than 273,000 people working in member firms around the world.
KPMG in Ukraine provides audit, tax, accounting and advisory services to local and international businesses. KPMG has been working in Ukraine since 1992, and our goal has always been to use the firm's global intellectual potential, combined with the practical experience of our Ukrainian professionals, to help leading companies to achieve their goals.
In Ukraine KPMG has its offices in Kyiv and Lviv.
