Job Description

Cyber Response & Recovery - Manager
Base Location: London/Manchester plus network of 20 offices nationally:
The KPMG Risk Consulting function is a cornerstone of our business. Operating from locations across the UK we do work that matters, serving the country with diligence and expertise.
KPMG is one of the world's largest and most respected consultancies. We've supported the UK through times of war and peace, prosperity and recession, political and regulatory upheaval. We've proudly stood beside the institutions and businesses which make the UK what it is.
By encompassing a wide range of disciplines across a breadth of areas such as Customer Experience and Digital, Strategy, Forensic, Risk and Regulatory, People and Talent, and Operational and Financial Transformation, we become immersed in our clients' organisations, applying sector knowledge and technology solutions to deliver the best possible outcomes and get it right first time.
Why Join KPMG as a Cyber Response & Recovery Manager?
The Cyber Response & Recovery Manager role will be working in the Cyber Response Services (CRS) Team within our Risk Consulting practice, reporting directly into the head of cyber response. Cyber security is one of the areas which KPMG has identified for tremendous investment and growth. Our clients face a challenging cyber threat and look to us to help them understand and respond to that threat.
This is an opportunity to join a high performing team that works with a wide variety of clients, as KPMG are 1 of just 9 tier 1 responders in the UK. As such, you will gain a huge amount of experience in a short space of time and will also have the opportunity to be put through a range of security certifications.
What will you be doing?

• Manage and co-ordinate cyber security incidents for our clients (this includes being available to work on-call on a monthly basis).
• Digital forensics of relevant incident data (disk, volatile memory, network packets, log files).
• Maintaining a current view of the cyber threat and being able to advise clients on the threat landscape and attacks which may be relevant to them.
• Liaising with clients on delivery, implementation and project issue.
• Ability to generate well-structured responses to bids and requests for proposals.

What will you need to do it?

• A broad understanding of the cyber security threat landscape.
• Strong technical background in computers and networks, and programming skills.
• Significant and proven experience of dealing with cyber security incidents and associated response measures.
• Understanding of a wide range of information security and IT methodologies, principles, technologies and techniques.
• Excellent interpersonal, written and communication skills.

Skills we'd love to see/Amazing Extras:

• A current government security clearance (SC/DV) or willingness to acquire such a clearance will be seen as an advantage.
• Incident management certifications such as:

• CREST certified incident manager (CCIM)
• GIAC Certified Incident Handler (GCIH) * Degree level qualified, MSc in Information Security, IT or relevant STEM subjects.

To discuss this or wider Consulting roles with our recruitment team, all you need to do is apply, create a profile, upload your CV and begin to make your mark with KPMG.
Our Locations:
We are open to talk to Risk Consulting talent across the country but our core hubs for this role are:

• London Canary Wharf
• Manchester

With 20 sites across the UK, we can potentially facilitate office work, working from home, flexible hours, and part-time options. If you have a need for flexibility, please register and discuss this with our team.
Find out more:
Within Consulting we have a range of divisions and specialisms. Click the links to find out more below:

• Consulting at KPMG:
• ITs Her Future Women in Tech programme:
• KPMG Workability and Disability confidence:

For any additional support in applying, please click the links to find out more:

• Applying to KPMG:
• Tips for interview:
• KPMG values:
• KPMG Competencies:

• KPMG Locations and FAQ: