Senior Consultant - Cyber Security Governance
About the role
The Senior Consultant - Cyber Security Governance will support organizations in enhancing their information security, compliance, risk management, and resilience. The role involves leading ISMS implementations, driving ISO 27001 certification, conducting governance and compliance assessments, supporting SOC 2 readiness, developing security policies, facilitating risk assessments, advising clients on governance and compliance, delivering workshops, engaging with senior management, and mentoring junior consultants. The position requires hands-on experience with security frameworks and certifications, as well as strong communication and stakeholder management skills. The role is with KPMG and involves working with clients to improve their cyber security posture.
Must have
- Bachelor's Degree in Information Technology, Cyber Security, Computer Science, or a related field.
- Minimum 3 years of experience in Cyber Security Governance, Risk, and Compliance (GRC).
- Proven experience in implementing ISO/IEC 27001, including participation in at least two complete implementation and certification cycles.
- Experience supporting or leading SOC 2 audits and readiness assessments.
- Hands-on experience with ISO 22301 (Business Continuity Management) and ISO 27701 (Privacy Information Management) implementation and compliance programs.
- ISO/IEC 27001 Lead Auditor certification (mandatory).
- Strong understanding of NIST Cybersecurity Framework (NIST CSF) and COBIT governance principles.
- Experience conducting risk assessments, control reviews, and compliance gap assessments.
- Excellent communication, stakeholder management, and report-writing skills.
Nice to have
- ISO 22301 Lead Implementer/Auditor certification.
- ISO 27701 implementation experience.
- CISA Certification
- Experience within a consulting or professional services environment.
- Exposure to regulatory and data privacy compliance frameworks.
Technologies
- Cybersecurity
- HTML
- ISO 27001
- NIST
- SOC 2
Highlights
Applications are to be submitted via LinkedIn Apply. All applications are treated confidentially under Sri Lankan PDPA guidelines. Only shortlisted candidates will be contacted. By applying, candidates consent to KPMG processing their personal data for recruitment purposes, with CVs retained for three months if not selected. For more details, refer to the KPMG Privacy Notice.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka