Responsibilities
 

• Deliver technical security engagements, including penetration testing (infrastructure and application), security architecture, system and network assurance, and code reviews
• Support information security engagements across the full set of capabilities at KPMG, including security strategy, policy and architecture, information privacy and governance, certification and compliance, business and technology resilience and security testing
• Communicate technical issues in business terms and deliver value using a pragmatic approach to the technical components of information security
• Develop marketing and training materials to help develop staff awareness within the company and communicate KPMG’s capabilities to clients
• Build and maintain relationships with existing and prospective clients, and develop/improve your network of business contacts
• Take an active role in KPMG’s global community of security professionals, assist with research into vulnerabilities and develop our ability to perform security engagements
• Assist with scoping prospective engagements and developing proposals
• Identify and communicate engagement findings to senior management and client personnel
• Recognise performance improvement opportunities for clients
• Work across KPMG service lines to identify opportunities to team up with other departments

Qualifications

• Bachelor’s degree from an accredited college/university in a Computer Science-related discipline
• CISSP, CISA and/or CISM certification preferred
• Accreditation for an industry penetration testing course (e.g. CPTE, CPTC, GPEN, or CEH)
• Minimum of three years’ experience in information security, ideally within a professional services environment or internal consultancy function delivering penetration testing or related services
• Strong knowledge of enterprise technologies, especially networking principles and internet-based technologies
• Strong knowledge of internet application security, including common internet application vulnerabilities and network architecture to support internet applications
• Strong knowledge base in operations, enterprise networking, operating systems and database security evaluation and architecture
• Hands-on experience conducting network scanning and penetration testing on external and internal networks
• Experience with security testing tools such as Nessus, SuperScan, Nmap, WebScarab, Paros Proxy, Nikto, Wikto, Burp, Aircrack and NetStumbler is an advantage
• Knowledge of IT security vendor products is an advantage
• Experience in financial services is preferred
• Excellent written and verbal communication skills in English and Chinese (Mandarin or Cantonese)
• Strong interpersonal skills with a demonstrated ability to gain the confidence and respect of senior level executives
• Strong client services orientation and accustomed to taking an active role in executing client engagements
• Strong analytical skills and the ability to write at a ‘publication’ quality level with regard to communication findings and recommendations
   

To apply please send your CV and salary expectations to human.resources.hk@kpmg.com

We offer successful candidates an attractive remuneration package and the opportunity to work in a dynamic and exciting environment.

Personal data collected will be used for recruitment purposes only.

© 2013 KPMG, a Hong Kong partnership and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative ("KPMG International"), a Swiss entity. All rights reserved.

The KPMG name, logo and "cutting through complexity" are registered trademarks or trademarks of KPMG International.