About the Team
KPMG's Technology Risk & Cyber Security practice helps organisations navigate emerging technology risks while building trust, resilience, and confidence in an increasingly digital world.
Our Security of AI (Trusted AI) team is at the forefront of one of the most significant technology shifts of our time. We help organisations securely adopt artificial intelligence, strengthen AI governance, manage emerging risks, and harness AI to enhance cyber security capabilities.
Working with leading organisations across financial services, government, defence, healthcare, and critical infrastructure, our team brings together cyber security, technology risk, and AI expertise to help clients confidently embrace the future of AI.
Your Opportunity
As a Senior Consultant within our Security of AI (Trusted AI) team, you will work on some of the most complex and rapidly evolving challenges in cyber security and artificial intelligence.
This is a hands-on role where you will partner with clients to design, implement, and assess AI security solutions that help organisations manage risk while accelerating innovation. You will contribute to cutting-edge engagements across AI governance, AI identity and access management, secure AI development, AI-enabled security operations, and regulatory compliance.
You will have the opportunity to develop deep expertise in a high-growth area, work alongside experienced leaders and specialists, and help shape the future of secure and trusted AI across Australia.
Key Responsibilities
-
Conduct AI risk assessments, governance reviews, and control evaluations using recognised industry frameworks and methodologies.
-
Support the design and implementation of AI governance frameworks, AI identity and access management solutions, and secure AI operating models.
-
Contribute to secure AI development initiatives, including AI risk management, model security, adversarial testing, and secure deployment practices.
-
Assist clients in integrating AI-enabled capabilities into cyber security operations, threat detection, monitoring, and risk management processes.
-
Assess regulatory and compliance requirements relating to AI and support clients in developing appropriate controls and governance practices.
-
Deliver client workshops, discovery sessions, assessments, and technical advisory services.
-
Prepare high-quality reports, presentations, frameworks, and recommendations for technical and non-technical stakeholders.
-
Develop reusable assets, templates, methodologies, playbooks, and accelerators that support scalable delivery across the practice.
-
Contribute to thought leadership initiatives, including articles, research, webinars, and industry insights.
-
Support business development activities through proposal development, solution design, and client presentations.
-
Collaborate with cross-functional teams to deliver innovative and practical client outcomes.
-
Share knowledge, mentor junior team members, and contribute to a culture of continuous learning and improvement.
How are you Extraordinary
-
You are intellectually curious and innovative, embracing emerging technologies, continuously learning, and applying creative thinking to solve complex problems.
-
You are a collaborative and trusted relationship builder, fostering strong partnerships with clients and colleagues while contributing to an inclusive and high-performing team environment.
-
You are proactive and accountable, taking ownership of outcomes, demonstrating initiative, and delivering high-quality work in dynamic and evolving environments.
Your Experience
We are looking for professionals with experience in cyber security, technology risk, information security, or related technical disciplines.
You will bring experience in several of the following areas:
-
Identity and Access Management (IAM), Privileged Access Management (PAM), Zero Trust, or identity lifecycle management.
-
Security architecture, threat modelling, cloud security, or secure solution design.
-
Security operations, threat hunting, incident response, detection engineering, or security monitoring.
-
Security engineering, DevSecOps, application security, vulnerability management, or secure software development.
-
Governance, Risk and Compliance (GRC), security assessments, control frameworks, or regulatory compliance.
-
Working with cloud platforms such as Azure, AWS, or GCP.
-
Scripting, automation, or development using Python, PowerShell, Bash, or similar technologies.
-
Delivering client-facing technology, cyber security, or risk engagements.
-
Facilitating workshops, presenting findings, and communicating technical concepts to a range of stakeholders.
-
Exposure to AI governance, AI risk management, AI security, machine learning, or emerging technology initiatives will be highly regarded but is not essential.
-
Demonstrated experience within cyber security, technology risk, information security, or a related field.
-
Exposure to cloud security, security engineering, DevSecOps, AI technologies, or machine learning concepts will be advantageous.
-
Experience within consulting, professional services, government, or large enterprise environments is desirable.
-
A passion for emerging technologies, continuous learning, and solving complex technology challenges.
