Advisory - Consulting, Cyber Strategy & Governance | Off-Cycle Internship (Jan 2027 to Jun 2027)

Technology & Cybersecurity

Technology underpins many of the most influential organisations in the world and presents opportunities for businesses that want to seek out new markets and invest in transformational change. Over the last ten years, rapid technological emergence, greater connectivity, and a 24/7 approach to global commerce have also increased exposure to cyber risks.

KPMG Cybersecurity professionals assist clients in addressing concerns around Confidentiality, Integrity, Availability, and Privacy of their technology, business systems, and information assets. Using a holistic view of how technology and business integrate, the Cyber team performs technology-risk focused assessments, technology compliance, IT/operational process reviews, and designs information risk and cyber security solutions.

Cyber Strategy and Governance (S&G)

KPMG Cyber Strategy and Governance (S&G) professionals advise senior executives, including CEOs, CISOs, and CIOs, on establishing resilient and effective cybersecurity. This team helps organizations design cyber operating models and define strategic approaches that integrate people, processes, and technology.

Responsibilities

You will work across industries to assess cyber risks, shape policies, and roll out governance frameworks that align with business objectives and regulatory requirements. Key focus areas include:

• Cyber strategy development and implementation
• IT governance and access management
• Business continuity & crisis management
• Cyber laws and regulatory compliance
• Technology risk management and third-party risk
• AI Trust, Risk, and Security Management (AI TRiSM), covering AI governance, AI security, and data privacy/data security management

Role Activities

• Assist in the development of cybersecurity strategies and operating models.
• Support assessments of clients’ cybersecurity maturity, governance structures, and risk exposure.
• Contribute to the design of policies, frameworks, and roadmaps that enhance cyber resilience.
• Conduct research on emerging cyber threats, regulatory changes, and industry best practices.
• Prepare client deliverables such as reports, presentations, and dashboards.
• Collaborate with cross-functional teams to support project delivery and client engagement.

Qualifications

• Degree in Cybersecurity / Information Security; OR
• Degree in Engineering with relevant skills/experience/aptitude to develop in the field of cybersecurity; OR
• Degree in Computer Science / IT with relevant skills/experience/aptitude to develop in the field of cybersecurity.

Technical Skills

• Basic understanding of cybersecurity principles, including risk management, governance, and compliance.
• Familiarity with cybersecurity and governance frameworks such as NIST CSF, ISO 27001, or COBIT.
• Awareness of IT governance and access management concepts, including identity and access controls.
• Knowledge of business continuity and crisis management planning.
• Understanding of cyber laws and regulatory compliance, especially data privacy (e.g., GDPR, PDPA).
• Basic familiarity with cloud platforms (AWS, Azure, GCP) and their security considerations.
• Exposure to AI governance and data protection, including ethical considerations in AI use.
• Participation in cybersecurity competitions, clubs, or capstone projects would be advantageous.
• Prior hands-on experience in developing and implementing AI/ML solutions would be a strong advantage.
• Relevant certifications in cybersecurity, AI/ML, or data analytics would be an advantage; candidates without certifications but with equivalent skills or willingness to obtain them are encouraged to apply.

Soft Skills

• Strong analytical and problem-solving skills with the ability to think critically about risk and governance issues.
• Effective written and verbal communication skills for documentation and stakeholder interaction.
• Team collaboration skills and willingness to work in cross-functional environments.
• Curiosity and eagerness to learn, especially in fast-evolving areas like AI and cybersecurity.
• Adaptability and resilience, especially in dynamic consulting environments.
• Time management and organizational skills to handle multiple tasks and deadlines.
• Initiative and self-motivation to pursue certifications, training, or side projects.