About the role
Data Security:
Educational qualifications
•Bachelor’s degree (minimum requirement).
•Equivalent experience (minimum 2 years) in data protection or Data Loss Prevention (DLP) may be considered in lieu of degree.
Work experience
§Minimum 3 years of experience with data protection or DLP technologies.
§Exposure to three or more of the following areas:
§Data discovery, data classification, data tagging
§Data leakage/content monitoring and filtering (DLP)
§Secure messaging/email encryption
§Mobile device security
§Public Key Infrastructure (PKI)
§Data Rights Management (DRM)
§Secure information storage
§Basic familiarity with:
§Data Loss Prevention tools such as Microsoft Purview, Netskope, Zscaler
§Data discovery & classification tools such as BigID, Cyera, , Varonis, OneTrust
§Foundational understanding of:
§Networking concepts (TCP/IP, OSI model)
§Operating systems (Windows, UNIX, mainframe)
§Security technologies (firewalls, IDS/IPS, etc.)
§Programming/scripting languages (C, Java, Perl, Python, Shell)
§Databases (MS SQL, Oracle, etc.)
§Basic understanding of privacy and data protection regulations including:
§PCI DSS, GLBA, Basel II, EU Data Protection Directive, GDPR, CCPA/CRPA.
§Willingness and ability to travel and work in fast‑paced, results-driven environments.
The ideal candidate will:
§Assist clients in designing, deploying, and managing controls that reduce the risk of data compromise.
§Support clients in defining technical requirements, evaluating solutions, designing architecture, and testing data protection technologies.
§Provide support in enabling protection for data at rest and data in motion.
§Assist in creating and testing DLP rules and policies.
§Advise clients on future-state cybersecurity challenges and partner with them to enhance capabilities.
§Contribute to KPMG thought leadership internally and externally.
§Operate as a technical subject matter specialist.
§Stay updated on industry trends, cyber risk, and data protection best practices.
Mandatory Certification Required:
•Security+
•Microsoft Security SC-400 (Good to have)
Technical Skills Required:
Knowledge of data security domains:
·Data discovery & classification
·Data tagging
·Data leakage/content monitoring (DLP)
·Secure messaging and email encryption
·Mobile device security
·PKI, DRM, secure storage
Familiarity with DLP tools:
·Microsoft Purview
·Netskope
·Zscaler
Familiarity with data discovery & classification tools:
·BigID, Cyera, , Varonis, OneTrust
· Understanding of:
·TCP/IP, OSI model
·Windows, UNIX, mainframe OS fundamentals
·Firewalls, IDS/IPS
·Programming/scripting (C, Java, Perl, Python, Shell)
·Databases (MS SQL, Oracle)
Knowledge of regulatory frameworks:
•PCI DSS, GLBA, Basel II, GDPR, CCPA/CRPA, EU Data Protection Directive.
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to support US hours with flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Ability to work in fast-paced, results-driven environments.
•Strong willingness to learn new technologies.
•Ability to grasp technical concepts quickly.
•Strong client advisory and collaboration skills.
•Ability to contribute effectively and at a rapid pace.
•Professional communication and ability to support thought leadership.