KPMG US
Associate Director, Software Security Architecture and Enablement
KPMG US, Cincinnati, Ohio, United States, 45208
Associate Director, Software Security Architecture and Enablement
Join KPMG US as an Associate Director, Software Security Architecture and Enablement. KPMG provides audit, tax, and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients, and our culture encourages individual development, inclusivity, innovation, and community support. KPMG is seeking an Associate Director, Software Security Architecture and Enablement to join our Enterprise Security Services organization. This is a remote work opportunity. Responsibilities: Lead enterprise DevSecOps strategy and execution by embedding security by design and “Security/Policy as Code” across the SDLC. Serve as a senior security advisor to cross-functional teams and executives, translating risk trade-offs into actionable controls. Advance DevSecOps maturity (DVSOMM) by defining KPIs/OKRs, building dashboards, and driving continuous improvement of secure engineering practices. Modernize governance and security reviews through automation and Generative AI, maintaining standards and reusable design patterns. Architect secure platforms and delivery pipelines across multi-cloud and hybrid environments, integrating SAST/DAST/SCA, IaC, secrets scanning, and compliance into CI/CD. Grow talent and partnerships by mentoring a mid-sized team, planning resources and projects, promoting secure coding practices, and collaborating with cloud vendors. Qualifications: Minimum eight years of recent experience in security architecture within regulated enterprises, delivering secure “as-a-service” solutions. Bachelor's degree from an accredited college or university. Expertise in cloud security and delivery models, with hands-on experience securing IaaS/PaaS/SaaS and containerized/cloud-native environments. Proven ability to define and implement security standards and controls, aligned to frameworks such as NIST, ISO 27001, PCI, HIPAA. Practical experience embedding security into CI/CD pipelines, integrating SAST, DAST, SCA, IaC, secrets scanning, and compliance checks. Leadership and secure engineering capabilities, including threat modeling, code reviews, and application/API testing. KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer, and all qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws.
#J-18808-Ljbffr
Join KPMG US as an Associate Director, Software Security Architecture and Enablement. KPMG provides audit, tax, and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients, and our culture encourages individual development, inclusivity, innovation, and community support. KPMG is seeking an Associate Director, Software Security Architecture and Enablement to join our Enterprise Security Services organization. This is a remote work opportunity. Responsibilities: Lead enterprise DevSecOps strategy and execution by embedding security by design and “Security/Policy as Code” across the SDLC. Serve as a senior security advisor to cross-functional teams and executives, translating risk trade-offs into actionable controls. Advance DevSecOps maturity (DVSOMM) by defining KPIs/OKRs, building dashboards, and driving continuous improvement of secure engineering practices. Modernize governance and security reviews through automation and Generative AI, maintaining standards and reusable design patterns. Architect secure platforms and delivery pipelines across multi-cloud and hybrid environments, integrating SAST/DAST/SCA, IaC, secrets scanning, and compliance into CI/CD. Grow talent and partnerships by mentoring a mid-sized team, planning resources and projects, promoting secure coding practices, and collaborating with cloud vendors. Qualifications: Minimum eight years of recent experience in security architecture within regulated enterprises, delivering secure “as-a-service” solutions. Bachelor's degree from an accredited college or university. Expertise in cloud security and delivery models, with hands-on experience securing IaaS/PaaS/SaaS and containerized/cloud-native environments. Proven ability to define and implement security standards and controls, aligned to frameworks such as NIST, ISO 27001, PCI, HIPAA. Practical experience embedding security into CI/CD pipelines, integrating SAST, DAST, SCA, IaC, secrets scanning, and compliance checks. Leadership and secure engineering capabilities, including threat modeling, code reviews, and application/API testing. KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer, and all qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws.
#J-18808-Ljbffr