Cybersecurity Expert

We’re looking for an experienced Cybersecurity Expert to join KPMG’s Cybersecurity team in Almaty or Astana. In this role, you’ll work on cybersecurity consulting projects for leading organizations across various industries, helping clients strengthen their security posture, manage cyber risks, and align cybersecurity initiatives with business objectives.

As our Cybersecurity Expert, you will:

• Conduct cybersecurity assessments, gap analyses, and risk reviews based on leading industry standards and frameworks.
• Develop cybersecurity strategies, policies, controls, and roadmaps aligned with business and regulatory requirements.
• Assess cybersecurity risks and maturity levels, providing practical recommendations to improve resilience against cyber threats.
• Manage client stakeholders, lead project workstreams, and deliver high-quality reports and presentations.
• Support the development of junior team members and contribute to business development initiatives.

You’re the perfect match for this role if you have:

• A Bachelor’s or Master’s degree in Information Technology, Cybersecurity, or a related field.
• 1+ years of experience in cybersecurity consulting or internal cybersecurity functions.
• Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, COBIT, or CIS Controls.
• Hands-on experience in cybersecurity risk management, information security governance, ISMS, application security, cloud security, or related areas.
• Experience managing stakeholders and presenting recommendations to senior management.
• Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage.
• Strong analytical, communication, and report-writing skills.
• Fluent English (written and spoken).
• Willingness to travel across Central Asia when required.
  
  Please Note: we assess candidates based on their own knowledge, skills, and experience. The use of artificial intelligence (AI) tools during the interview process is not permitted. If such use is identified, the interview results may be invalidated, and the candidate may be disqualified from the recruitment process.