Cyber Response & Recovery – Senior Manager

Overview

In this role you will lead and coordinate cyber security incident response and digital forensics for clients, shaping incident response capabilities and playbooks. You will manage a team of incident responders while collaborating with service leadership to scale delivery. The role blends hands-on technical work with leadership, offering growth toward service line leadership. You’ll build tools, runbooks, and tabletop exercises to advance client maturity and KPMG’s response capabilities, with opportunities to influence risk consulting outcomes on a broad scale.

Responsibilities

• Lead and coordinate cyber security incidents for clients in collaboration with the head of cyber response
• Conduct digital forensics across disks, memory, network traffic, and logs
• Maintain awareness of the threat landscape and advise clients accordingly
• Develop and enhance in-house cyber-response tools
• Assess and improve client incident response capability maturity
• Help stand up or strengthen client incident response capabilities
• Manage engagements end-to-end: scoping, costing, budgeting, risk management, and timely delivery of high-quality deliverables
• Liaise with clients on delivery, implementation and issues
• Prepare well-structured responses to bids and RFPs

Key requirements

• Strong background in cyber-security and incident response
• Proven experience managing a range of complex incidents (e.g., ransomware, advanced intrusions)
• Experience leading rapid deployment incident response teams
• Excellent interpersonal, written, and communication skills
• Broad understanding of threat landscape and information security methodologies
• Mentor mindset toward junior team members
• Ability to manage multiple cases with meticulous attention to detail
• Willingness to travel on short notice and operate on-call

• excellent communication
• team leadership and mentorship
• multi-tasking with attention to detail
• Windows and Windows Active Directory
• Linux, Cisco and enterprise network knowledge
• Programming ability (Python preferred) to develop tools

…