The Executive – Information Security & Data Privacy is responsible for supporting the implementation and day-to-day operation of the firm's Information Security and Data Privacy program. The role involves monitoring compliance with security policies, conducting security reviews, coordinating audits, supporting incident management, performing risk assessments, and assisting in the implementation of security and privacy controls to protect organizational information assets.
Information Security
Support the implementation and monitoring of Information Security policies, standards, and procedures.
Conduct periodic security reviews and compliance assessments across business functions.
Monitor adherence to information security controls and report deviations.
Review user access requests and ensure compliance with access management policies.
Assist in evaluating security requirements for new applications, projects, and business initiatives.
Data Privacy
Assist in implementing data privacy controls in accordance with organizational policies and regulatory requirements.
Support data classification, retention, secure disposal, and data handling initiatives.
Participate in Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
Risk Management
Perform information security risk assessments for applications, systems, and third-party vendors.
Incident Management
Coordinate with IT and business teams for timely incident resolution.
Support internal, external, and client security audits.
Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Security, or a related discipline.
1–3 years of experience in Information Security, Cyber Security, IT Risk, or Data Privacy.
Preferred Certifications
ISO/IEC 27001 Foundation
Microsoft Security Fundamentals (SC-900)
CompTIA Security+
Certified in Cybersecurity (ISC² CC)
Information Security fundamentals
Data Privacy principles
MS Excel, PowerPoint, and Word
Soft Skills
Strong analytical and problem-solving abilities
Excellent written and verbal communication skills
Timely completion of security assessments and reviews.
Closure of audit observations within agreed timelines.
Accuracy and quality of security documentation.
Effective support for security incidents and risk remediation.
Timely completion of compliance activities and reporting.
KPMG – це міжнародна мережа фірм, що надають аудиторські, податкові та консультаційні послуги. В офісах KPMG у 143 країнах світу працюють понад 273,000 співробітників (FY23). Кожна фірма KPMG є незалежною юридичною особою і представляє себе як таку.
KPMG працює в Україні з 1992 року. KPMG в Україні надає аудиторські, податкові, бухгалтерські та консультаційні послуги для місцевих і міжнародних компаній. Нашою метою завжди було використання глобального інтелектуального потенціалу фірми в поєднанні з практичним досвідом наших українських професіоналів, щоб допомогти провідним компаніям досягти своїх цілей.
Офіси компанії знаходяться у Києві та Львові.
______________
KPMG is a global network of professional services firms providing audit, tax and advisory services. We operate in 143 countries and territories, and in FY23, collectively employed more than 273,000 people working in member firms around the world.
KPMG in Ukraine provides audit, tax, accounting and advisory services to local and international businesses. KPMG has been working in Ukraine since 1992, and our goal has always been to use the firm's global intellectual potential, combined with the practical experience of our Ukrainian professionals, to help leading companies to achieve their goals.
In Ukraine KPMG has its offices in Kyiv and Lviv.
