Risk

• Act as the GDR Policy Lead subject matter expert (SME) to develop and update KPMG Global Digital Risk Policies and guidance materials ensuring alignment to industry standards such as ISO and NIST;
• Act as one of GDR’s AI Delegates representing GDR on the Global AI Trusted Design Authority Working Group and the GQ&RM AI Taskforce providing policy advice on the adoption of AI at KPMG.
• Manage resources who support Policy Portal Maintenance and the Policy Exceptions Process.
• Provide oversight of the existing Policy Exceptions Process and work with other stakeholder groups to ensure process is fit for purpose and exceptions are reviewed and decided on in a timely manner and in line with Policy.
• Lead the GDR Information Protection Policy Working Group (IPPWG), which is a formal policy governance body made up of KPMG International and Member Firm stakeholders that facilitates the review, updating and voting on Policy materials;
• Coordinate further ratification and communication of new or updated materials to other formal policy governance bodies, such as the Policy Development Working Group and the Global Quality and Risk Management Steering Group Working with the central policy team, prepare the pre-read materials and subsequent communication (Special Alert) to communicate updates to GDR policies to the network of member firms.
• Support the GDR Senior Leadership Team in regular tasks related to compliance, attestations and certification audits (specifically ISO27K, SOC2, SoQM, IPCR) and Global client requests related to our policy materials.
• Maintain one to one calls with IPPWG members to discuss feedback, input and questions;
• Represent GDR on Security Standards working groups and review Standards for compliance with GDR Information Protection Policies.
• Responding and contributing to AI policy requirements from an information security perspective and as directed by AI governance bodies.
• Provide advice and support to other KPMGI Functions, Business Lines and KPMG’s Network of Member Firms on a wide range of information protection strategic and operational priorities, including those related to artificial intelligence (AI).

Senior Global Digital Risk Policy Manager

Technology & Operations Risk Strategy and Governance Liaison