Information Security Risk Analyst – Consultant

About the role

KPMG Australia is seeking an Information Security Risk Analyst to strengthen its information security posture. The analyst will work with business stakeholders to identify cyber risks, recommend controls, and support resilience across the firm.

Key responsibilities

• Evaluate systems, applications and software to determine cyber security status and develop improvement plans.
• Analyse architectural documentation with a focus on security and provide reporting to local IT leaders and global executives.
• Offer risk assessment and advice during acquisitions and third‑party integrations.
• Champion projects that enhance the firm’s security framework, including emerging technologies such as AI, blockchain and quantum computing.

Required profile

• Proactive growth mindset, comfortable challenging the status quo.
• Excellent communication skills to convey complex concepts clearly in written and verbal form.
• Minimum bachelor’s degree in IT or a business‑related discipline.

Required skills

• Knowledge of security standards and frameworks (ISO 27001, NIST 800‑53).
• Experience with cloud services, particularly AWS and/or Azure.
• Understanding of risk management, security & privacy controls.
• Relevant certifications such as CISM, CRISC, CISSP, SABSA (highly beneficial).