Information Security Officer

When you join KPMG Ireland, you are joining a community of over 4,200 employees who collectively work together, both in person and virtually, to achieve their full potential.

We are known as an organisation who want you to come as you are and do work that truly matters. Joining KPMG Ireland is an opportunity to enhance your career, not only in the work that you enjoy doing, but equally through the global connections that you make, the lifelong learning that you can accomplish and the chance to make your mark.

Are you our next Information Security Officer?

Location: Dublin, as part of our hybrid working model.

Grade: Officer

Contract type: Permanent

We are seeking an Information Security Officer to join the Information Security Office (ISO), supporting the firm's governance, risk, and compliance activities while playing a key role in enabling secure adoption of new technologies across the business.

This role will be responsible for conducting information security risk assessments and supporting firmwide processes such as Technology Enablement Governance (TEG) and New Technology Evaluation & Risk (NTER), helping stakeholders navigate security requirements while ensuring risks are appropriately assessed and managed.

The successful candidate will combine strong analytical and stakeholder engagement skills with a practical understanding of information security, and will play an important role in supporting emerging areas such as AI risk and security assessments.

A snapshot of your peer group:

• A Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field.
• Relevant professional certifications such as ISO 27001, CISM, CRISC, or equivalent are desirable.
• The role requires 3-4 years of experience within information security, or a related field
• Experience working in an information security, IT risk, or GRC role, ideally within a professional services or regulated environment.
• Experience conducting security risk assessments, including supplier or third-party assessments, is highly desirable.
• Exposure to governance processes such as technology onboarding, risk approval, or change assessment frameworks is advantageous.
• Experience or demonstrable interest in AI security, AI governance, or completion of AI-related training/certifications is highly desirable.
• Familiarity with ISQM controls or experience working in a professional services environment is a strong advantage.

Your responsibilities and achievements will evolve as you enhance your career with us. Here is what you can initially expect:

Support the Information Security Office in delivering governance, risk, and compliance activities, including:

• Conducting information security risk assessments for systems, suppliers, and projects
• Maintaining risk documentation and supporting risk tracking and reporting
• Assisting in the development and maintenance of policies, standards, and procedures

Lead the operational delivery of TEG and NTER processes, including:

• Acting as a primary point of contact for stakeholders submitting requests
• Guiding business and IT teams through assessment requirements
• Reviewing submissions for completeness and risk considerations
• Conducting security assessments as part of the overall evaluation process

Perform security risk assessments for new and existing technologies, including

• Identification of security, privacy, and operational risks
• Assessment of vendor controls and security posture
• Recommendation of proportionate mitigation measures

Support the firm's increasing focus on AI and emerging technologies, including:

• Participating in AI-related risk assessments and governance processes
• Reviewing AI use cases for security, data protection, and ethical considerations
• Maintaining awareness of evolving AI regulatory and security requirements

Collaborate with the Cyber Security Engineering & Operations team, ensuring:

• Alignment between identified risks and technical control implementation
• Clear communication of required remediation actions
• Consistency between risk assessments and operational realities

Support Third Party Risk Management (TPRM) activities, including:

• Assisting with due diligence assessments (e.g. DDQs)
• Reviewing vendor security documentation and certifications
• Tracking remediation actions and risk acceptance where required

Assist with audit and assurance activities, including:

• Preparing documentation and evidence for internal and external audits
• Supporting ISO 27001 and other certification processes
• Contributing to control testing and validation activities

Promote security awareness and good practice across the firm, particularly in relation to:

• Secure adoption of new technologies
• Risk ownership and accountability
• Integration of security into business processes

Your team:

You will be joining a department of 10 IT and Information Security professional, who are responsible for protecting the internal infrastructure of KPMG Ireland. This role is a key component of a two-tier Information Security operating model, working in close partnership with the Information Security Office, which is responsible for governance, risk, and compliance oversight.

This role sits within the Information Security Office, which provides independent governance, risk, and compliance oversight, and works in close partnership with the Cyber Security Engineering & Operations function.

Discover How KPMG Can Enrich Your Life Beyond Your Career

Benefits Tailored for You

At KPMG, we understand that life is multifaceted. That's why we offer a flexible benefits package designed to support your unique lifestyle. Our benefits include:

• Discounted Health Insurance: Prioritise your well-being with our health insurance options.
• Additional Annual Leave: Purchase extra leave to spend more time with friends and family or to travel.
• Enhanced Family Leave: Enjoy more time with your family with our generous leave options.
• Emergency Childcare Cover: For times when your regular childcare plans fall through
• Social Events: Connect and network with colleagues through our engaging social events.
• Early Finish Fridays: Start your weekends early on bank holidays and during the summer.
• Relocation Assistance: Smooth your transition if you're moving to Ireland.
• Learning & Development: Access our extensive supports, including LinkedIn Learning, to grow your skills.

We also offer a variety of flexible working options to help you balance your professional and personal life.

Career Progression with Continuous Support

From the moment you join KPMG, you'll receive dedicated support from your performance manager to enhance your skills. Our award-winning Business School provides continuous learning opportunities to deepen your expertise.

We stand out as the only Big Four firm to announce promotions four times a year, offering you frequent opportunities for career advancement.

Commitment to Inclusion & Diversity

Inclusion, diversity, and equity are at the heart of KPMG. We celebrate diverse backgrounds, experiences, and perspectives, and we're committed to fostering an inclusive and equitable environment at every level. Our goal is to attract and retain the best talent by building a culture where everyone can achieve their potential. Learn more about our commitment here - https://kpmg.com/ie/en/home/about/inclusion-diversity-equity.html

Ready to Join Us?

If you meet most of the criteria, we encourage you to apply by submitting your CV. KPMG is an equal opportunities employer, welcoming applications from people of all backgrounds. We are happy to provide reasonable accommodations during the recruitment process if needed. Necessary arrangements can be made at interview stage to accommodate the needs of candidates with disabilities.

For any specific queries about the role, please contact Sharon Griffin

For a glimpse into life at KPMG, follow #ExperienceKPMG on LinkedIn, Instagram, TikTok, and X.

#LI-SG

Please note that agency assistance is not required for this position.

By clicking apply to this role your application will not only be considered for this position, but your details will be stored on our database and may be considered for similar future positions that may arise. This means that the personal data contained in your application and provided to KPMG as part of the application process may be retained by us for up to 18 months from the date of your application and you hereby agree to that. If you do not wish your details to be stored on our recruitment database, please email [email protected] stating this and we will ensure that such information is not stored other than for the purposes of this application.