漏洞管理

Job Title: 漏洞管理

Location Shenyang

Function Advisory

Service Line KPMG Digital Ignition

Job description

KPMG China provides multidisciplinary services from audit and tax to advisory, with a strong focus on serving our clients’ needs and their industries. Not only do we have an overriding commitment to provide the highest quality services for our clients, but we also strive to become a responsible corporate citizen that has a positive impact on our environment and community. At KPMG, you’ll translate insights into action and reveal opportunities for all—our teams, our clients and our world.

Service Line Overview

KPMG Digital Ignition Centre is the IT research and delivery centre founded by KPMG China, which aims to drive innovation and digital transformation for both our firm and our clients. The first KDi center was setup in Nanjing in 2017. The second center was setup in Shenzhen in 2021. And the third center was setup in DalianTengfei Software Park in 2022.

Job Responsibilities

Manage the full vulnerability lifecycle across enterprise IT systems, cloud environments, network devices, and applications, including vulnerability identification, analysis, assignment, and remediation tracking.

Operate the Vulnerability Management System and maintain accurate relationships among vulnerabilities, assets, applications, and responsible owners to ensure tickets are correctly assigned and continuously updated.

Monitor vulnerability remediation SLAs and drive responsible teams to complete remediation.

Track and escalate vulnerabilities approaching or exceeding their deadlines, and initiate the risk management process when remediation cannot be completed on time.

Regularly prepare reports on vulnerability trends, remediation status, SLA performance, overdue reasons, and key risks to support management reporting, audits, and compliance reviews.

Coordinate with application, development, infrastructure, cloud, network, and business security teams to drive the closure of complex vulnerabilities and resolve ownership issues.

Experience & Background

•Bachelor’s degree or above in Computer Science, Cybersecurity, Software Engineering, or a related field.

•At least three years of experience in cybersecurity, vulnerability management, security operations, or a related area.

•Familiarity with common vulnerabilities affecting web applications, hosts, databases, middleware, cloud platforms, and network

devices.

•Strong data analysis skills, with the ability to use Excel for vulnerability data validation, statistical analysis, and report preparation.

•Strong cross-functional communication, issue-driving, and risk management capabilities, with the ability to manage multiple vulnerability remediation activities simultaneously.

•Good written and verbal communication skills in both Chinese and English, with the ability to prepare vulnerability notifications, analysis reports, and management presentations.

About KPMG

At KPMG China, we are committed to being an equal opportunity employer, with zero tolerance for any form of discrimination against any persons. It is important for us to create an inclusive, diverse and agile workplace for our people to develop and thrive at both a personal and professional level.

We strive to make ESG (environmental, social and governance) a watermark running through our organisation; from empowering our people to become agents of positive change, to providing better solutions and services to our clients to help them achieve

their ESG goals. View Our Impact Plan to learn more about our ESG commitments and progress across four key pillars - Governance, People, Planet and Prosperity – and how we make a positive impact on our people, environment and society.

We encourage you to come as you are, and we welcome all qualified candidates to apply, and hope you unlock

opportunities with us. Visit KPMG China website for more company information.

You acknowledge and agree that all personal information hereby provided regarding yourself will be used by KPMG China for its candidate selection purposed only. KPMG China collects, uses, processes, and retains your personal information in accordance with KPMG China’s Online Privacy Statement and/or KPMG China Privacy Statement (collectively "Privacy Statement").

During the recruitment process, KPMG China may need to store personal information of candidates in a designated third-party application tracking platform.

If you have any questions regarding the information you provided in the form or your job application in general, please contact KPMG China’s HR personnel in the location where your application is submitted [see here].