Incident Response Manager, Global Information Security Group

At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world.

The Opportunity

GISG (Global Information Security Group) is one of five domains within KPMG’s Global Technology & Knowledge group. GISG provides the information protection and technology infrastructure that secures KPMG’s technology environment and connects its network of member firms. The GSOC is looking for an GSOC (Global Security Operations Center) Incident Response Manager to provide Security Incident Management Framework and coverage between GISG and the ITS Global Service Management Major incident management process.

• Provide Bridge between GISG Operational teams and ITS Global Major Incident Management Process
• Coordinate Security Incident management activities across Regions
• Provide Member Firms (MF) with Incident Response advice and support through the regional model
• Provide guidance to GSOC Operational Teams on advice given to MF when escalating incidents
• Provide Regionally aligned situational awareness to MF's and GSOC Operational Teams
• Define, set up, and maintain repeatable Teams War Room structure
• Define, set up, and maintain communication structure and templates for the three below high level incident types. Assist in coordination with GCISO to link into board level and regulatory comms requirements
• Give Service Management the Security context of any Security Incident promoted to Major Incidents
• Assist in the delivery of Cyber War games and purple teaming activities
• Initiate US Advisory IR assistance requests
• Coordinate US Advisory IR activities when necessary

• Experience of security incident response in a large, distributed organisation
• Experience working in, or alongside, Security Operations Centres in a large, distributed organisation
• Experience working across multi-disciplinary teams in relation to security incident management activities
• Demonstrate experience dealing with complex security related incidents
• Experience working in a hybrid legacy and cloud environment
• Bachelor’s degree in a related field (e.g. Computer Sciences, Computer Engineering, Information Technology and Security) or equivalent work experience
• Minimum 10 years experience in ITIL based Incident management activities
• ITIL certification or equivalent experience
• GCIH certification or equivalent certification or experience
• Strong communication, reporting and documentation skills, proven ability to discuss with both business and technology management

Keys to your success

KPMG individuals Deliver Impact | Seek Growth | Inspire Trust and understand that a diverse workforce enables us to deepen relationships and strengthen our business.

Providing you with the support you need to be at your best

For more information about KPMG in Canada’s Benefits and well-being, click here.

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice. For more information about Inclusion, Diversity & Equity in Recruitment, please click here.

Adjustments and accommodations throughout the recruitment process

At KPMG, we strive for an inclusive recruitment process that allows all candidates to Come As You Are and Thrive with Us. We aim to provide a positive experience and are ready to offer adjustments or accommodations to help you perform at your best. Adjustments (an informal request), i.e. extra preparation time or the option for micro breaks during interviews, and accommodations (a formal request), i.e. accessible communication supports or technology aids are tailored to individual needs and role requirements.

To begin a confidential conversation about adjustments or accommodations at any point throughout the recruitment process, we encourage you to contact KPMG’s Employee Relations Service team for support by emailing cdnersteam@kpmg.ca or by calling 1-888-466-4778, Option 3.

For information about accessible employment at KPMG, please visit our accessibility page.