Cybersecurity Expert

Location: Onsite or hybrid in Almaty or Astana, Kazakhstan. The role is based at the employer's premises in Almaty and may require travel across Central Asia.

Company

KPMG's Cybersecurity team delivers cybersecurity consulting projects for leading organizations across various industries.

What you will do

• Conduct cybersecurity assessments, gap analyses, and risk reviews using leading industry standards and frameworks.
• Develop cybersecurity strategies, policies, controls, and roadmaps aligned with business and regulatory requirements.
• Assess cybersecurity risks and maturity levels and provide practical recommendations to improve resilience against cyber threats.
• Manage client stakeholders, lead project workstreams, and prepare high-quality reports and presentations.
• Support the development of junior team members and contribute to business development initiatives.

Requirements

• Bachelor's or Master's degree in Information Technology, Cybersecurity, or a related field.
• At least 1 year of experience in cybersecurity consulting or internal cybersecurity functions.
• Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, COBIT, or CIS Controls.
• Hands-on experience in cybersecurity risk management, information security governance, ISMS, application security, cloud security, or related areas.
• Experience managing stakeholders and presenting recommendations to senior management.
• Strong analytical, communication, and report-writing skills.
• Fluent written and spoken English.
• Willingness to travel across Central Asia when required.

Nice to have

• Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor.

Culture & Benefits

• Work onsite or in a hybrid format in Almaty or Astana.
• Work on consulting projects for organizations across various industries.
• Travel across Central Asia may be required.
• AI tools are not permitted during the interview process; identified use may invalidate the interview results and disqualify the candidate.