Discussion

Data Security Consultant

Show

Open 32d

Educational qualifications

•Bachelor’s degree in a relevant discipline and/or equivalent related work experience.

•Professional security certifications such as:

•CISSP

•CISM

•CIPP

•CIPM

•CIPT

•CRISC

•

Work experience

• Minimum 10 years of technical architecture experience integrating data protection software into client infrastructure and applications.

· Demonstrated experience in three or more of the following areas:

·Data discovery

·Data classification

·Data tagging

·Data leakage/content monitoring & filtering (DLP)

·Secure messaging/email encryption

·Mobile device security

·Public Key Infrastructure (PKI)

·Data Rights Management (DRM)

·Secure information storage

· Experience with Data Loss Prevention, Data Discovery & Classification vendors and tools such as:

·Microsoft AIP

·Netskope

·Zscaler

·BigID

·Dataguise

·OneTrust

·Privaci.ai

· Experience with User Behavior Analytics (UBA) and Insider Threat tools or processes.

· Experience in network architecture design, implementation, and administration.

· Strong background in technical architecture integrating data protection systems into client environments.

· Ability and willingness to travel; experience working in fast‑paced, results‑driven environments.

•Assist clients in designing, deploying, and managing technology and process solutions to reduce data compromise risk.

· Support clients with technical requirements, solution evaluations, architecture design, and testing of data protection technologies.

· Enable clients with data protection capabilities for data at rest and in motion.

· Assist clients in creating and validating data loss prevention (DLP) rules and policies.

· Advise clients on future‑state cybersecurity challenges and collaborate to enhance their cybersecurity posture.

· Contribute to KPMG thought leadership and stay up to date on cyber risk and data protection trends.

· Build and maintain strong client relationships.

· Lead and manage multiple diverse teams across client engagements.

· Support strategic growth initiatives and the development of new service offerings.

Mandatory Certification Required:

•Professional security certifications such as:

•CISSP

•CISM

•CIPP

•CIPM

•CIPT

•CRISC

Technical Skills Required:

· Strong knowledge and hands-on experience with:

·Data discovery

·Data classification

·Data tagging

·Data leakage/content monitoring (DLP)

·Secure messaging & encryption

·Mobile device security

·PKI

·DRM

·Secure information storage

· Experience with leading data protection tools and platforms:

·Microsoft AIP

·Netskope

·Zscaler

·BigID

·Dataguise

·OneTrust

·Privaci.ai

Technical Skills Continued:

Familiarity with:

·User Behavior Analytics

·Insider Threat detection

· Technical architecture expertise integrating data protection tools into infrastructure.

· Knowledge of network architecture design and administration.

Behavioral / team skills

· Strong client relationship‑building and stakeholder management skills.

· Ability to manage and lead multiple diverse teams across engagements.

· Strong communication and advisory capabilities.

· Ability to stay current with industry trends and rapidly learn new technologies.

· Capacity to work effectively in fast‑paced, results-driven environments.

The ideal candidate will:

•Assist clients in designing, deploying, and managing data protection technologies and processes to reduce the risk of data compromise.

•Support development of technical requirements, vendor evaluations, architecture/design, and testing for data security solutions.

•Advise clients on future-state cybersecurity challenges and collaborate to enhance their capabilities.

•Provide data protection enablement for data at rest and data in motion.

•Assist in creating and testing DLP rules and policies.

•Contribute to KPMG’s thought leadership and stay current on cybersecurity, data protection, and industry trends.

•Operate as a technical subject matter specialist.

•Guide and lead client interactions to ensure high‑quality delivery.

•Support managing engagement financials and help coach junior team members.

Mandatory Certification Required:

•Microsoft SC-400

•Microsoft SC-401

Technical Skills Required:

· Strong knowledge of:

·Data discovery

·Data classification

·Data tagging

·Data leakage prevention (DLP)

·Secure email/messaging

·Mobile device security

·PKI & DRM

·Secure information storage

·CDMC framework

· Hands‑on experience with data protection tools & platforms including:

·Microsoft AIP/MIP

·Zscaler

·Netskope

·BigID

·Dataguise

·OneTrust

·Privaci.ai

·Informatica EDC

· Familiarity with:

·Insider Threat

·User Behavior Analytics

· Knowledge of global and regional privacy regulations:
PCI DSS, GLBA, Basel II, EU Data Protection Directive, GDPR variants, U.S. State Privacy Laws.

Behavioral / team skills

· Ability to work in a fast-paced, results‑driven environment.

· Strong ability to grasp new technologies quickly.

· Ability to contribute rapidly and proactively during engagements.

· Strong client-facing communication and leadership skills.

· Ability to guide and coach junior team members.

· Strong collaboration and stakeholder management skills.

· Professional demeanor with ability to operate as a subject matter specialist