Manager Cyber Strategy & Risk

About the role

As a Manager in the Cybersecurity Strategy & Risk practice, you will lead multidisciplinary teams to help clients protect critical assets, manage cyber risks and meet evolving regulatory expectations such as DORA and NIS2. You will work closely with senior executives to design and implement effective governance and operating models.

Key responsibilities

• Lead cybersecurity maturity assessments, risk analyses and strategy engagements across sectors including financial services, energy, public sector and manufacturing.
• Develop improvement roadmaps and resilience strategies aligned with ISO 27001, NIST CSF and CIS Controls.
• Advise senior stakeholders on governance, risk management and compliance, translating technical risks into business insights.
• Support clients in building sustainable cybersecurity capabilities, including governance structures, GRC processes and performance metrics.
• Manage project teams, review deliverables and ensure high‑quality outcomes.
• Contribute to business development by shaping proposals and representing KPMG in the market.
• Coach and mentor junior colleagues, fostering a collaborative culture.

Required profile

• Minimum 5 years of experience in cybersecurity, information risk management or related advisory functions.
• Master’s degree or equivalent experience.
• Strong understanding of frameworks such as ISO 27001, CCB CyberFundamentals, NIST CSF and CIS Controls.
• Experience with regulatory programs (e.g., DORA, NIS2, IT Risk Management, Business Continuity) is a strong asset.
• One or more certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor/Implementer or NIS2 Lead Implementer.
• Excellent communication and presentation skills, with the ability to engage senior stakeholders.
• Proven leadership and project‑management abilities.
• Fluency in English and at least one of Dutch or French.

Required skills

• ISO 27001
• NIST Cybersecurity Framework (CSF)
• CIS Controls
• DORA
• NIS2
• CCB CyberFundamentals
• CISA certification
• CISM certification
• CISSP certification
• ISO 27001 Lead Auditor/Implementer
• NIS2 Lead Implementer

What we offer

• Attractive remuneration package with extra‑legal benefits (premium electric car, allowances, bonus, personal device, cafeteria plan).
• Flexible work arrangements, including remote work and up to 20 days per year to work from anywhere.
• Comprehensive insurance package with full KPMG contributions.
• Career development opportunities and trainings aligned with personal goals.