Junior Specialist, IT Security

About KPMG Singapore

KPMG Singapore is part of a global network of independent professional service firms operating in 138 countries, with over 276,000 professionals worldwide. Each firm in the KPMG network is a legally separate entity. KPMG International Limited is a private English company limited by guarantee and does not provide client services directly.

Role Overview

We are seeking a proactive Junior IT Security Specialist to join our team. This hands-on role supports daily security operations, regulatory compliance, and enterprise-wide security initiatives. The position is vital for maintaining the organization's security posture by ensuring prompt responses to security incidents and facilitating ongoing compliance and audit processes. Collaboration with business stakeholders, global security teams, and various technology divisions is a key aspect of this role.

Key Responsibilities

• Oversee daily security operations including monitoring, analyzing, and responding to security incidents in coordination with local and international Security Operation Centers (SOC) to ensure rapid containment and resolution.
• Manage the vulnerability lifecycle from detection through prioritization, remediation tracking, and reporting to reduce risk exposure and maintain audit transparency.
• Support regulatory compliance efforts with frameworks such as ISO 27001, MAS TRM, and CSA Cyber Trust Mark by maintaining relevant documentation, performing control tests, and ensuring readiness for audits.
• Administer user access reviews, privileged access management, and identity lifecycle processes to enforce stringent access controls and the principle of least privilege.
• Maintain and enhance security solutions including web security gateways, data loss prevention (DLP), endpoint protection, and data classification to ensure consistent policy implementation and continuous improvement.
• Lead investigations and remediation of security incidents and data breaches, collaborating with business units, legal, risk management, and global teams as necessary.
• Support the secure implementation of emerging technologies such as cloud services and AI tools in compliance with security and regulatory standards.

Candidate Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related discipline.
• Up to 2 years of professional experience in IT security.
• Practical knowledge and experience in security operations, incident response, vulnerability management, identity and access management (IAM, PAM, UAR), and security technologies including DLP, endpoint security, web gateways, and CASB.
• Familiarity with ISO 27001 security standards.
• Ability to thrive in a dynamic environment with high operational demands.
• Excellent communication and stakeholder management skills.
• Relevant security certifications such as CompTIA Security+, CompTIA CySA+, or their equivalents.

Diversity and Inclusion Statement

KPMG Singapore is dedicated to promoting a diverse and inclusive work culture that values varied perspectives, backgrounds, and experiences. As an equal opportunity employer, we consider all qualified candidates without regard to age, race, gender identity or expression, color, marital status, religion, sexual orientation, disability, or other non-merit factors. We celebrate the unique talents of our people and support their growth through programs such as "Take Charge: Flexi-work," which fosters flexible and innovative work arrangements to achieve business objectives.