About KPMG Qatar

KPMG has had a presence in Qatar for nearly 47 years. We opened for business in Qatar in 1977 and are now one of the largest and most prestigious professional services firms in the country.

KPMG in Qatar employs over 350 professional staff and partners. We recruit the best and brightest from around the world and currently employ 28 nationalities. For our clients, this means we provide Audit, Tax and Advisory services locally, drawing on the latest thinking and best practice from around the world. 

Business Unit Overview

KPMG's Advisory practice is one of the largest Advisory businesses worldwide and the major growth area for our organization. Our services are focused on the Finance Function, and we work with clients in identifying and tackling their challenges in Growth, Governance and Performance. Our Advisory teams support businesses as they restructure and expand, whether organically or by acquisition. We help them to become more efficient and provide support as they adapt to the challenges posed by a rapidly changing business environment.

Sub-business Unit Overview: Management Consulting.

Successful organizations are often built through the optimal management of people, operations, strategy, technology, and assets. Market leaders across sectors, whether public or private, are engaged in a continuous evaluation of their investment in people, technology and assets to help ensure the best outcomes aligned to their objectives.

Role Overview

In this pivotal role, you will be engaged primarily with the delivery of cybersecurity cloud engagements for KPMG Qatar clients. The responsibilities include: Engage as a Subject-Matter-Expert in client-facing discussion to capture current state of client-cloud transformation journey including hybrid (On-premises, Azure, GCP, AWS) or multi-cloud architectures including (SaaS).

Primary Job Responsabilities & Accountabilities.

• Review and develop cloud-related governance (Policies, Procedures) ensuring alignment and compliance with applicable regulation and industry compliance (i.e. QCSF, NIA, PDPPL, PCI-DSS, QCB, NIST, ISO27001, etc.)
• Review and develop security architecture patterns in collaboration with other stakeholders from client and internal teams
• Document recommendations and action plans associated with activation of required controls to meet regulatory and industry compliance practices
•  Lead workshops, training sessions and knowledge-sharing initiatives
• Recommend relevant roadmap, action plans to achieve client objectives
• Evaluate controls related cloud security, data protection and privacy using cloud ecosystem
• Provide advice relating to IAM (EntraID, Cognito, Google Cloud Identity, Federation (OIDC, SSO, SAML)
• Support client DevSecOps governance and activation of relating controls
• Advise clients on effective monitoring and SIEM integration (i.e. Onsite, Hybrid) including GCP Chronicle and Azure Sentinel and associated SOAR capabilities and integration into Command Center, Azure Security Center (Defender for Cloud).
• Infrastructure as Code (IaC) with Ansible, Terraforms, etc.
• Support clients in activation of controls (i.e. Purview, Priva, ARC, Compliance Manager)
• Develop deliverables and presentations
• Collaboration with project team and other advisory teams to support and develop best practices

         Qualification & Experience

• Bachelor's degree in information security, engineering, etc. -
• Bilingual resource (Arabic/English)
• 8-10 years IT/cybersecurity experience with at least 3-4 years in cloud (Azure, GCP preferred)
• Must have at least two certifications (one in security, and one with cloud specialization) or equivalent (i.e. CISSP, ISO27001 LI/LA, AZ-500,SC-100, AZ-400, GCP Cloud engineer, CCSP, etc.)