Manager, Security Governance, Risk and Compliance

About the role

KPMG is seeking a Manager to lead its Security Governance, Risk and Compliance efforts within the Enterprise Security Services organization. You will guide technology, data, AI and cyber risk assessments, turning complex findings into actionable insights for senior leadership.

Key responsibilities

• Lead risk assessments across technology, data, operations, AI and cyber domains and translate findings into strategic recommendations.
• Develop and maintain risk and control matrices, risk registers and manage the end‑to‑end risk lifecycle.
• Evaluate and recommend controls to mitigate risk, ensuring alignment with firm policies and risk appetite.
• Collaborate with lines of defense and senior leaders to foster a risk‑aware culture and target high‑impact audit areas.

Required profile

• Minimum five years of risk and compliance experience in a large professional services firm, focusing on physical and cyber security.
• Bachelor’s degree preferred; high school diploma or GED required.
• Relevant certifications such as CIA, CISA, CISM, CRISC or CISSP are preferred.
• U.S. work authorization without need for future visa sponsorship.

Required skills

• Data risk management, risk assessment and control design.
• Understanding of multiple compliance frameworks and risk management principles.
• Ability to communicate technical data to non‑technical audiences.
• Certifications: CIA, CISA, CISM, CRISC, CISSP.

What we offer

• Competitive salary range of $127,200 – $246,900 per year (California).
• Comprehensive benefits package including medical, dental, vision, disability, life insurance, 401(k) and well‑being programs.
• Personal Time Off, holiday calendar and additional paid breaks.
• Inclusive culture that supports professional development and community involvement.