Cyber Response, Associate Director/ Director

Job Description

Cyber Response is one of five pillars in KPMG’s cyber security business, the others being Strategy & Governance, Transformation, Cyber Defence (Ethical Hacking) and Education (Training).  
 
The Cyber Response team primarily assists clients who have experienced a cyber security incident such as ransomware, business e-mail compromise or other kinds of network intrusion.  
We investigate the root cause of the incident and the extent of the breach - what systems were affected and if data was exfiltrated.  
 
We also help clients to recover from the incident – help restore systems and expel intruders from the network as well as provide practical recommendations on how to prevent further incidents. The typical output of our work is a report which is used by client’s management or sent to regulators such as Singapore’s Personal Data Protection Commission (PDPC).  
Other activities include preparing clients for incidents by improving the processes, writing playbooks simulating incidents through war games and providing bespoke training. 
You will work with an experienced team of forensic professionals, cyber incident coordinators, security professionals, attorneys, and corporate partners. 

This role involves:   
•    Leading and managing the response to cyber-security incident response engagements.
•    Helping with commercial proposals to clients based on existing templates.
•    Coaching and managing colleagues.
•    Being hands-on as required to deliver incident response & digital forensics engagements.
•    Working directly with end clients and helping them deal with their cyber-security challenges.

Cybersecurity incidents can occur at inconvenient times such as on a Friday afternoon You will have to be flexible to accommodate the need to work outside of regular office hours. We value your wellbeing and are committed to being mindful of your personal and family needs. Through KPMG’s “Take Charge” program, we provide you with the flexibility to set your working hours.   We encourage to make best of use of your time by working from office and home as appropriate. 

⠀

What are we looking for:  
•    Self-driven, possesses strong desire to learn and identify new technologies and services and willingness to share knowledge with the team.
•    More than 8 years of professional experience, at least five years should be spent in a technical role in cyber security with experience in Incident Response and Digital Forensics.  
•    Ability to lead incident response cases – formulate a response plan, break it down into tasks, supervise delivery and participate hands-on as required.
•    Good understanding of networking, how Internet works, computers and familiarity with any big cloud providers such as Azure, Amazon Web Services or Google Compute Platform, and, of course, Cyber Security.
•    Subject matter expertise in the field of digital forensics and incident response.  You will be expected to help your colleagues to resolve their technical questions and do the relevant research to resolve the issues. 

Interpersonal/other skills: 
•    Time management. It is common to work on several projects at the same time. You should be able to understand priorities and manage expectations when deadlines are these are not achievable. 
•    Presentation skills. You should be comfortable presenting your conclusions to your colleagues and clients and answer questions.  KPMG will provide further presentation skills training. 
•    Ability to write in plain English. Most projects end with a report presented to the client; you will be expected to write sections of the report on the areas you have worked on in plain (business) English. 
•    Leading self. You should be able to work by yourself towards your mid-term and long-term career goals. Your senior peers will provide coaching and mentoring.
•    Leading others. You should be able to supervise, motivate and engage your team members.

#LI-JL2