Cybersecurity Lead (Africa) at KPMG

Position Summary

We are in search of an accomplished professional with a robust history in cybersecurity field. This individual will play a pivotal role in serving our clients across Africa. The position is Pan-African, entailing leadership responsibilities across the continent. This role will be based in the Nairobi regional office, primarily serving clients in East Africa, and as the need arises, the larger Africa region.

Key roles and responsibilities:
Strategy:

•  Develop and execute a cohesive cybersecurity strategy across Africa, aligning with global standards and local requirements.
•  Develop and continuously refine the firm's cybersecurity service offerings to meet current and emerging market needs and client challenges.
•  Innovate and integrate new cybersecurity technologies, methodologies, and best practices into client solutions, ensuring KPMG remains at the cutting edge of cybersecurity consulting.
•  Develop strategic plans to expand KPMG’s cybersecurity services into new markets or sectors, identifying opportunities for growth and partnership.
•  Lead marketing efforts related to cybersecurity, including developing case studies, conducting webinars, and other activities that highlight the firm’s expertise and success stories.
•  Form strategic partnerships with technology vendors and cybersecurity product companies to enhance service offerings and create integrated solutions for clients.
•  Leverage these partnerships to gain access to cutting-edge tools and insights that can benefit KPMG and its clients.

Client Impact:

•  Advise clients on best practices in cybersecurity, risk management, and compliance.
•  Oversee the implementation of security measures, including threat analysis, penetration testing, and security audits, to protect client data and systems.
•  Develop tailored cybersecurity solutions that address the specific challenges and regulatory requirements of clients across different sectors.
•  Design and implement risk management frameworks that clients can adopt to assess and mitigate their cybersecurity risks.
•  Guide clients on compliance with international and local cybersecurity regulations, helping them navigate the complexities of regulatory requirements to avoid fines and reputational damage.
•  Position KPMG as a thought leader in the cybersecurity space by publishing white papers, speaking at industry conferences, and participating in public forums on cybersecurity issues.
•  Oversee the delivery of cybersecurity services, ensuring high standards of quality and client satisfaction.
•  Ensure that operational capabilities such as penetration testing, threat hunting, and incident response are robust and effective.

Finance:

•  Responsible for setting and achieving financial targets for the cybersecurity practice.
•  Manage the annual budget for cybersecurity initiatives, ensuring cost-effectiveness and ROI on security investments.

.Academic/Professional qualifications and Experience:

•  Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
•  Advanced certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CEH (Certified Ethical Hacker), or similar credentials are highly preferred.
•  Minimum of 10 years of experience in cybersecurity, with at least 5 years in a leadership role overseeing cybersecurity operations, strategy, and team management.
•  Proven experience in designing and implementing comprehensive cybersecurity frameworks and strategies within large, complex organizations, preferably across multiple countries or regions.
•  Demonstrated track record in managing significant cybersecurity incidents and responses.
•  In-depth knowledge of cloud architectures and security strategies specific to cloud environments, including public, private, and hybrid clouds.
•  Experience with cloud security frameworks, best practices, and tools like CASB (Cloud Access Security Broker), cloud-native security services (AWS Security, Azure Security Center, Google Cloud Security Command Center), and IAM (Identity and Access Management) solutions.
•  Deep understanding of cybersecurity technologies and methodologies, including network security, encryption, threat analysis, cybersecurity forensics, and risk management protocols.
•  Experience with various security platforms and tools, such as firewalls, antivirus software, IDS/IPS, DLP, SIEM, and vulnerability scanners.
•  Familiarity with compliance and regulatory frameworks such as GDPR, ISO 27001, NIST, and others relevant to multinational corporations.

Personal attributes:

•  Strong leadership skills with the ability to mentor, motivate, and guide a team of cybersecurity professionals.
•  Excellent communication and interpersonal skills, capable of explaining complex cybersecurity concepts to non-technical stakeholders and influencing senior management decisions.
•  Strategic mindset with the ability to anticipate security challenges and develop proactive measures to mitigate risks.
•  Exceptional problem-solving skills with a proven ability to think analytically and tactically about complex issues.
•  Capability to adapt to new challenges and rapid changes in the cybersecurity landscape.
•  Strong project management skills, with experience in managing large-scale security implementation projects across diverse environments.
•  Ability to prioritize tasks, allocate resources effectively, and meet deadlines within budget constraints.
•  Experience in client-facing roles, with the ability to build trust and foster strong client relationships.
•  Understanding of business processes and how cybersecurity can align with and support business objectives.