Assistant Manager – Information Protection (Guangzhou/Shenzhen)

About the role

KPMG China is seeking a motivated information security professional to join its Information Protection Group as an Assistant Manager. Reporting to the Chief Information Security Officer, you will help manage governance, risk, compliance and stakeholder engagement across the firm.

Key responsibilities

• Coordinate vulnerability assessments, track remediation plans and monitor high‑risk, actively exploited and zero‑day vulnerabilities.
• Lead internal and external information security audits, certifications and compliance reviews, including ISO 27001, ISO 27017, ISO 27701 assessments.
• Review risk assessment results, track corrective actions and ensure compliance with firm policies and standards.
• Support collection of compliance evidence, report preparation and remediation follow‑up for Mainland China, Hong Kong SAR and Macao SAR regulations.
• Respond to security enquiries, client due‑diligence requests and regulator assessments.
• Promote a security‑conscious culture through awareness initiatives, policy implementation and stakeholder communication.

Required profile

• Bachelor’s degree in information technology, cybersecurity, computer science or a related discipline.
• 3–5 years of experience in cybersecurity, information security governance, technology risk management or compliance.
• Strong coordination, communication and stakeholder‑management abilities, with the capacity to work independently.
• Analytical, detail‑oriented and able to manage multiple priorities simultaneously.
• Fluent in written and spoken English and Chinese.

Required skills

• Knowledge of ISO 27001, ISO 27017, ISO 27701 standards.
• Familiarity with the NIST Cybersecurity Framework.
• Understanding of the Chinese Mainland Multi‑Level Protection Scheme (MLPS) and data‑privacy requirements.
• Relevant certifications such as CISA, CISM, CDPSE, CRISC, CISSP or CISP (preferred).