Service Delivery Security Manager

Team

The Service Delivery Security Manager role is in the KPMG UK Information Security function and reports directly to the Security Production Assurance & Compliance Lead.  This role is critical in the provision and delivery of secure, innovative, technology-enabled services and solutions for KPMG and our clients.  The role is vital to KPMG’s ability to demonstrate that we are delivering ‘secure by design’ services and solutions such that our business stakeholders, our clients and our regulators trust KPMG.

Role

The primary purpose of the role is to enable harmonious delivery of Security Services, by ensuring strong collaboration with the external Service Providers and entire range of KPMG business functions.  There are 3 main areas of focus:

• Manage the security services relationship to protect the delivery of the end to service services that involve all KPMG UK Technology services, or third-party suppliers.
• Provide governance for infrastructure security services
• Provide an overview of the complete set of services provided by all KPMG UK Technology services, or third-party suppliers and troubleshoot any issues and escalate as appropriate.

Key responsibilities are:

• Work closely with the Service Owners who are accountable for the end-to-end services, understand their roadmap for the service and the day-to-day operational requirements

• Maintain and lead the process to manage the Governance of these services
• Ensure firm standards and guidelines are followed, and contractual or operational commitments are delivered
• Review and govern the Service Provider Quality, Improvement Plans, Issues and Operational Risks, engaging the Security Production Assurance & Compliance Lead as required
• Raise and build consensus around issues or escalations and enable timely resolution.
• Govern Service Provider Knowledge Management, Knowledge Transfer, Reporting, Documentation and other engagement practices to ensure ongoing operational excellence
• Review Service Provider capacity plan to ensure it has enough capacity to meet the required demand and is in line with the Service Owner’s roadmaps
• Consolidate and provide reports on the delivery of Security services and initiatives across the relevant KPMG capabilities
• Ensure any planned changes across Technology or Service Provider are co-ordinated to ensure there is minimum disruption to Information Security services.
• Communicate major changes or enhancements in Information Security to Service Provider/ Business function and vice-versa
• Act as a single point of contact for general queries or issues flowing to and from the Security Function to the delivery teams
• Work closely with the Service Delivery Managers and Service Owners to ensure everyone has a clear view of the remediations and expectations
• Work closely with the Security Production Assurance & Compliance Lead to implement the operational security activities, processes and standards as determined by them.
• Build long-term stakeholder relationships including negotiating service levels, and defining project scope.
• Monitor, review and drive compliance to security policies, guideline and standards (as defined by KPMG) using compliance reports supplied by the Supplier and internal teams. You will escalate issues to the Security Production Assurance & Compliance Lead where necessary
• Use your experience to propose changes to existing policies and procedures based on feedback from Internal and Supplier Service Operations teams to Security Production Assurance & Compliance Lead to drive operating efficiency and compliance
• You will support incident and problem management teams in prioritisation o

The Technology in M&A team at KPMG is a growing and dynamic team. We deal with all aspects of the technology function, from strategy, cloud, digital, technology spend, etc. We work with both acquirers and vendors on pre- and post-deal technology issues.

Power & Utilities (P&U), led by Dr Matt Firla-Cuchra, counts c85 FTEs is the largest business area of the IAG and encompasses work for major clients in the sector, including all UK utilities as well as some of the largest energy and water companies in Europe and beyond. We provide in-depth strategic and technical advice on strategy and business planning and analysis, corporate finance and corporate financial management, regulatory policy, cost assessment and benchmarking as well as in other areas to help our clients create value for both shareholders and customers. Our work combines elements of policy, finance, strategy and economics to assist our clients in structuring investments, securing financing, supporting regulatory regimes for the benefit of customers as well as maximising shareholder value. We are widely recognised by many industry stakeholders as market leaders influencing the future of the utilities sector.

The Cyber Strategy Manager role is pivotal to the sustainable growth of the Cyber Strategy service area within the UK, supporting the delivery of cyber strategy services within our Infrastructure Government and Healthcare (IGH) sector.

The KPMG Connected Technology function is a cornerstone of our business. We do work that matters to our local business and communities – supporting technical innovation and adoption of cutting-edge solutions across the UK.