Cybersecurity Expert

Location: Astana/Almaty Conduct cybersecurity assessments, gap analyses, and risk reviews based on leading industry standards and frameworks. Develop cybersecurity strategies, policies, controls, and roadmaps aligned with business and regulatory requirements. Assess cybersecurity risks and maturity levels, providing practical recommendations to improve resilience against cyber threats. Manage client stakeholders, lead project workstreams, and deliver high-quality reports and presentations. Support the development of junior team members and contribute to business development initiatives. A Bachelor’s or Master’s degree in Information Technology, Cybersecurity, or a related field. 1+ years of experience in cybersecurity consulting or internal cybersecurity functions. Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27001, COBIT, or CIS Controls. Hands-on experience in cybersecurity risk management, information security governance, ISMS, application security, cloud security, or related areas. Experience managing stakeholders and presenting recommendations to senior management. Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage. Strong analytical, communication, and report-writing skills. Fluent English (written and spoken). Willingness to travel across Central Asia when required. The opportunity to work on challenging cybersecurity projects for leading organizations in the financial and public sectors. The chance to develop expertise in penetration testing and cybersecurity consulting within a global professional services environment. Collaboration with experienced cybersecurity professionals and access to knowledge-sharing opportunities. A dynamic and supportive team culture with opportunities for professional growth. Please Note: we assess candidates based on their own knowledge, skills, and experience. The use of artificial intelligence (AI) tools during the interview process is not permitted. If such use is identified, the interview results may be invalidated, and the candidate may be disqualified from the recruitment process. Ready to take the next step in your cybersecurity career? Apply now and join KPMG to help organizations strengthen their security and protect against evolving cyber threats.