u/vMxrti

Hi everyone,

I’m currently trying to decide between staying in my current cybersecurity role or accepting an offer from KPMG as an IT Auditor, and I’d really appreciate outside perspectives, especially from people in cybersecurity, GRC, audit, Big 4, or consulting.

\*\*Current role:\*\*
I work as a Cybersecurity Analyst in a cybersecurity-focused company. My work is mainly around audits and compliance/security frameworks such as PCI DSS, DORA and SWIFT. The environment seems more directly connected to cybersecurity/GRC, and the company offers quite a lot of flexibility.

Main points:

\* Cybersecurity-focused company, with work closer to GRC/security audits. \* Flexible work model, including remote work depending on needs. \* Career paths related to GRC, payments, SOC, Blue Team and Red Team. \* Training/certifications, English classes, mentoring and performance reviews. \* Private health insurance fully covered, mental health sessions, home office support and some remote-work compensation. \* 26 days off in total. \* Salary is about \*\*20% lower\*\* than the KPMG offer, or put another way, KPMG would be a \*\*25% increase\*\* in fixed gross salary.

\*\*KPMG offer:\*\*
The offer is for an IT Audit role in Barcelona, in an audit/controls department, at Staff I level. It would be an indefinite full-time contract.

Main points:

\* Big 4 brand name, likely stronger CV signal. \* IT audit / controls role, probably more structured and corporate. \* Fixed salary is \*\*25% higher\*\* than my current fixed salary. \* 31 working days of vacation, which is 5 more days than my current package. \* Flexible compensation options: transport, meal card, health insurance, training, childcare, etc. \* Remote work only when the project allows, plus up to 4 weeks working from anywhere in Spain. \* Schedule seems more fixed: long standard days most of the year, but Fridays are shorter and summer schedule is better.

My main doubt is career direction. I’m interested in cybersecurity, GRC, IT audit and regulatory work, but I don’t want to move into a role that becomes too narrow or too “checklist audit” if it slows down my cybersecurity growth. On the other hand, KPMG could give me stronger brand recognition, more exposure to large clients, and a higher salary.

For those who have worked in Big 4 IT audit, cybersecurity consulting, GRC, or similar roles:
\*\*Would you choose the cybersecurity-focused role with lower pay but more direct cyber/GRC exposure, or KPMG IT Audit for the brand, salary increase and structured career path?\*\*

Any thoughts on long-term career impact, exit opportunities, work-life balance, and whether Big 4 IT Audit is worth it early in a cybersecurity/GRC career would be really helpful.

Thanks!

I've had it for a while now, and I'd like to get the Garmin experience and test it out.

I train mainly for triathlon, so mostly running, cycling I track with a bike computer and swimming with the watch (where I have the most problems with the T-Rex 3). Also I do wear my watch all day everyday, so I track my sleep and everyday metrics.

I'm really into structured training and creating workouts in Intervals.icu (since don't want to pay yet 😅) and getting insights with AI from workouts.

Which watches should I consider?

Hi everyone,

I’m currently trying to decide between staying in my current cybersecurity role or accepting an offer from KPMG as an IT Auditor, and I’d really appreciate outside perspectives, especially from people in cybersecurity, GRC, audit, Big 4, or consulting.

**Current role:**
I work as a Cybersecurity Analyst in a cybersecurity-focused company. My work is mainly around audits and compliance/security frameworks such as PCI DSS, DORA and SWIFT. The environment seems more directly connected to cybersecurity/GRC, and the company offers quite a lot of flexibility.

Main points:

* Cybersecurity-focused company, with work closer to GRC/security audits. * Flexible work model, including remote work depending on needs. * Career paths related to GRC, payments, SOC, Blue Team and Red Team. * Training/certifications, English classes, mentoring and performance reviews. * Private health insurance fully covered, mental health sessions, home office support and some remote-work compensation. * 26 days off in total. * Salary is about **20% lower** than the KPMG offer, or put another way, KPMG would be a **25% increase** in fixed gross salary.

**KPMG offer:**
The offer is for an IT Audit role in Barcelona, in an audit/controls department, at Staff I level. It would be an indefinite full-time contract.

Main points:

* Big 4 brand name, likely stronger CV signal. * IT audit / controls role, probably more structured and corporate. * Fixed salary is **25% higher** than my current fixed salary. * 31 working days of vacation, which is 5 more days than my current package. * Flexible compensation options: transport, meal card, health insurance, training, childcare, etc. * Remote work only when the project allows, plus up to 4 weeks working from anywhere in Spain. * Schedule seems more fixed: long standard days most of the year, but Fridays are shorter and summer schedule is better.

My main doubt is career direction. I’m interested in cybersecurity, GRC, IT audit and regulatory work, but I don’t want to move into a role that becomes too narrow or too “checklist audit” if it slows down my cybersecurity growth. On the other hand, KPMG could give me stronger brand recognition, more exposure to large clients, and a higher salary.

For those who have worked in Big 4 IT audit, cybersecurity consulting, GRC, or similar roles:
**Would you choose the cybersecurity-focused role with lower pay but more direct cyber/GRC exposure, or KPMG IT Audit for the brand, salary increase and structured career path?**

Any thoughts on long-term career impact, exit opportunities, work-life balance, and whether Big 4 IT Audit is worth it early in a cybersecurity/GRC career would be really helpful.

Thanks!

Hola a todos,

Estoy intentando decidir entre quedarme en mi puesto actual o aceptar una oferta de KPMG como IT Auditor en Barcelona/L’Hospitalet. Me gustaría conocer opiniones de gente que trabaje o haya trabajado en ciberseguridad, GRC, auditoría IT, Big 4 o consultoría.

Actualmente trabajo como Cybersecurity Analyst en una empresa especializada en ciberseguridad. Mi trabajo está bastante enfocado a auditorías y cumplimiento, especialmente en temas como PCI DSS, DORA y SWIFT. Me interesa mucho la ciberseguridad, GRC, auditoría IT y regulación, así que en principio el puesto actual está bastante alineado con esa parte.

Puesto actual:

• Empresa especializada en ciberseguridad.
• Trabajo más cercano a GRC, compliance y auditorías de seguridad.
• Modelo bastante flexible, con teletrabajo según necesidades de equipo/proyecto/cliente.
• Posibilidad de trabajar algunas semanas desde fuera de España, sujeto a condiciones.
• Planes de carrera relacionados con GRC, Payments, SOC, Blue Team y Red Team.
• Formación, certificaciones, clases de inglés, mentoring y evaluaciones de desempeño.
• Seguro médico cubierto por la empresa, apoyo en salud mental y ayuda para home office.
• 26 días de descanso en total.
• El salario fijo es un 20% inferior al de KPMG; visto al revés, KPMG supone una subida de +25%.

Oferta de KPMG:

• Puesto de IT Auditor en un departamento de auditoría/controles.
• Contrato indefinido a jornada completa.
• Marca Big 4, que entiendo que puede pesar bastante en el CV.
• Salario fijo bruto un 25% superior al actual.
• 31 días laborables de vacaciones.
• Teletrabajo cuando el proyecto lo permita y posibilidad de trabajar hasta 4 semanas desde cualquier lugar de España.
• Compensación flexible: transporte, comida, seguro médico, formación, guardería, etc.
• Horario aparentemente más corporativo/estructurado: jornadas más largas gran parte del año, aunque con viernes reducidos y mejor horario en verano.

Mi duda principal es la dirección de carrera. Por un lado, KPMG me ofrece más salario, más vacaciones, marca reconocida y exposición a clientes grandes. Por otro lado, mi puesto actual parece más directamente relacionado con ciberseguridad/GRC y quizá me permita crecer en un entorno más especializado.

Lo que me preocupa de KPMG es acabar en un rol demasiado centrado en testing de controles, documentación o auditoría “de checklist”, y alejarme de una trayectoria más cercana a ciberseguridad. Pero también pienso que Big 4 puede abrir puertas a futuro en GRC, risk, compliance, auditoría interna, consultoría o incluso otros roles de seguridad.

Para quienes tengáis experiencia en Big 4, IT Audit, GRC, ciberseguridad o consultoría:

¿Qué opción veis mejor a medio/largo plazo: quedarme en una empresa especializada en ciberseguridad con menos salario, o aceptar KPMG IT Audit por la marca, la subida salarial y la estructura de carrera?

Me interesan especialmente opiniones sobre:

• Salidas profesionales después de IT Audit en Big 4.
• Si es fácil volver o moverse hacia ciberseguridad/GRC después.
• Work-life balance real.
• Valor de KPMG/Big 4 en España.
• Qué decisión tomaríais vosotros en una fase relativamente temprana de carrera.

¡Gracias!

Hola a todos,

Estoy intentando decidir entre quedarme en mi puesto actual o aceptar una oferta de KPMG como IT Auditor en Barcelona/L’Hospitalet. Me gustaría conocer opiniones de gente que trabaje o haya trabajado en ciberseguridad, GRC, auditoría IT, Big 4 o consultoría.

Actualmente trabajo como Cybersecurity Analyst en una empresa especializada en ciberseguridad. Mi trabajo está bastante enfocado a auditorías y cumplimiento, especialmente en temas como PCI DSS, DORA y SWIFT. Me interesa mucho la ciberseguridad, GRC, auditoría IT y regulación, así que en principio el puesto actual está bastante alineado con esa parte.

Puesto actual:

• Empresa especializada en ciberseguridad.
• Trabajo más cercano a GRC, compliance y auditorías de seguridad.
• Modelo bastante flexible, con teletrabajo según necesidades de equipo/proyecto/cliente.
• Posibilidad de trabajar algunas semanas desde fuera de España, sujeto a condiciones.
• Planes de carrera relacionados con GRC, Payments, SOC, Blue Team y Red Team.
• Formación, certificaciones, clases de inglés, mentoring y evaluaciones de desempeño.
• Seguro médico cubierto por la empresa, apoyo en salud mental y ayuda para home office.
• 26 días de descanso en total.
• El salario fijo es un 20% inferior al de KPMG; visto al revés, KPMG supone una subida de +25%.

Oferta de KPMG:

• Puesto de IT Auditor en un departamento de auditoría/controles.
• Contrato indefinido a jornada completa.
• Marca Big 4, que entiendo que puede pesar bastante en el CV.
• Salario fijo bruto un 25% superior al actual.
• 31 días laborables de vacaciones.
• Teletrabajo cuando el proyecto lo permita y posibilidad de trabajar hasta 4 semanas desde cualquier lugar de España.
• Compensación flexible: transporte, comida, seguro médico, formación, guardería, etc.
• Horario aparentemente más corporativo/estructurado: jornadas más largas gran parte del año, aunque con viernes reducidos y mejor horario en verano.

Mi duda principal es la dirección de carrera. Por un lado, KPMG me ofrece más salario, más vacaciones, marca reconocida y exposición a clientes grandes. Por otro lado, mi puesto actual parece más directamente relacionado con ciberseguridad/GRC y quizá me permita crecer en un entorno más especializado.

Lo que me preocupa de KPMG es acabar en un rol demasiado centrado en testing de controles, documentación o auditoría “de checklist”, y alejarme de una trayectoria más cercana a ciberseguridad. Pero también pienso que Big 4 puede abrir puertas a futuro en GRC, risk, compliance, auditoría interna, consultoría o incluso otros roles de seguridad.

Para quienes tengáis experiencia en Big 4, IT Audit, GRC, ciberseguridad o consultoría:

¿Qué opción veis mejor a medio/largo plazo: quedarme en una empresa especializada en ciberseguridad con menos salario, o aceptar KPMG IT Audit por la marca, la subida salarial y la estructura de carrera?

Me interesan especialmente opiniones sobre:

• Salidas profesionales después de IT Audit en Big 4.
• Si es fácil volver o moverse hacia ciberseguridad/GRC después.
• Work-life balance real.
• Valor de KPMG/Big 4 en España.
• Qué decisión tomaríais vosotros en una fase relativamente temprana de carrera.

¡Gracias!

Hi everyone,

I’m currently trying to decide between staying in my current cybersecurity role or accepting an offer from KPMG as an IT Auditor, and I’d really appreciate outside perspectives, especially from people in cybersecurity, GRC, audit, Big 4, or consulting.

Current role:
I work as a Cybersecurity Analyst in a cybersecurity-focused company. My work is mainly around audits and compliance/security frameworks such as PCI DSS, DORA and SWIFT. The environment seems more directly connected to cybersecurity/GRC, and the company offers quite a lot of flexibility.

Main points:

• Cybersecurity-focused company, with work closer to GRC/security audits.
• Flexible work model, including remote work depending on needs.
• Career paths related to GRC, payments, SOC, Blue Team and Red Team.
• Training/certifications, English classes, mentoring and performance reviews.
• Private health insurance fully covered, mental health sessions, home office support and some remote-work compensation.
• 26 days off in total.
• Salary is about 20% lower than the KPMG offer, or put another way, KPMG would be a 25% increase in fixed gross salary.

KPMG offer:
The offer is for an IT Audit role in Barcelona, in an audit/controls department, at Staff I level. It would be an indefinite full-time contract.

Main points:

• Big 4 brand name, likely stronger CV signal.
• IT audit / controls role, probably more structured and corporate.
• Fixed salary is 25% higher than my current fixed salary.
• 31 working days of vacation, which is 5 more days than my current package.
• Flexible compensation options: transport, meal card, health insurance, training, childcare, etc.
• Remote work only when the project allows, plus up to 4 weeks working from anywhere in Spain.
• Schedule seems more fixed: long standard days most of the year, but Fridays are shorter and summer schedule is better.

My main doubt is career direction. I’m interested in cybersecurity, GRC, IT audit and regulatory work, but I don’t want to move into a role that becomes too narrow or too “checklist audit” if it slows down my cybersecurity growth. On the other hand, KPMG could give me stronger brand recognition, more exposure to large clients, and a higher salary.

For those who have worked in Big 4 IT audit, cybersecurity consulting, GRC, or similar roles:
Would you choose the cybersecurity-focused role with lower pay but more direct cyber/GRC exposure, or KPMG IT Audit for the brand, salary increase and structured career path?

Any thoughts on long-term career impact, exit opportunities, work-life balance, and whether Big 4 IT Audit is worth it early in a cybersecurity/GRC career would be really helpful.

Thanks!

Hi everyone,

I’m currently trying to decide between staying in my current cybersecurity role or accepting an offer from KPMG as an IT Auditor, and I’d really appreciate outside perspectives, especially from people in cybersecurity, GRC, audit, Big 4, or consulting.

Current role:
I work as a Cybersecurity Analyst in a cybersecurity-focused company. My work is mainly around audits and compliance/security frameworks such as PCI DSS, DORA and SWIFT. The environment seems more directly connected to cybersecurity/GRC, and the company offers quite a lot of flexibility.

Main points:

• Cybersecurity-focused company, with work closer to GRC/security audits.
• Flexible work model, including remote work depending on needs.
• Career paths related to GRC, payments, SOC, Blue Team and Red Team.
• Training/certifications, English classes, mentoring and performance reviews.
• Private health insurance fully covered, mental health sessions, home office support and some remote-work compensation.
• 26 days off in total.
• Salary is about 20% lower than the KPMG offer, or put another way, KPMG would be a 25% increase in fixed gross salary.

KPMG offer:
The offer is for an IT Audit role in Barcelona, in an audit/controls department, at Staff I level. It would be an indefinite full-time contract.

Main points:

• Big 4 brand name, likely stronger CV signal.
• IT audit / controls role, probably more structured and corporate.
• Fixed salary is 25% higher than my current fixed salary.
• 31 working days of vacation, which is 5 more days than my current package.
• Flexible compensation options: transport, meal card, health insurance, training, childcare, etc.
• Remote work only when the project allows, plus up to 4 weeks working from anywhere in Spain.
• Schedule seems more fixed: long standard days most of the year, but Fridays are shorter and summer schedule is better.

My main doubt is career direction. I’m interested in cybersecurity, GRC, IT audit and regulatory work, but I don’t want to move into a role that becomes too narrow or too “checklist audit” if it slows down my cybersecurity growth. On the other hand, KPMG could give me stronger brand recognition, more exposure to large clients, and a higher salary.

For those who have worked in Big 4 IT audit, cybersecurity consulting, GRC, or similar roles:
Would you choose the cybersecurity-focused role with lower pay but more direct cyber/GRC exposure, or KPMG IT Audit for the brand, salary increase and structured career path?

Any thoughts on long-term career impact, exit opportunities, work-life balance, and whether Big 4 IT Audit is worth it early in a cybersecurity/GRC career would be really helpful.

Thanks!

Hi everyone,

I’m currently trying to decide between staying in my current cybersecurity role or accepting an offer from KPMG as an IT Auditor, and I’d really appreciate outside perspectives, especially from people in cybersecurity, GRC, audit, Big 4, or consulting.

Current role:
I work as a Cybersecurity Analyst in a cybersecurity-focused company. My work is mainly around audits and compliance/security frameworks such as PCI DSS, DORA and SWIFT. The environment seems more directly connected to cybersecurity/GRC, and the company offers quite a lot of flexibility.

Main points:

• Cybersecurity-focused company, with work closer to GRC/security audits.
• Flexible work model, mostly remote work but option to go to the office.
• Career paths related to GRC, payments, SOC, Blue Team and Red Team.
• Training/certifications, English classes, mentoring and performance reviews.
• Private health insurance fully covered, mental health sessions, home office support and some remote-work compensation.
• 26 days off in total.
• Salary is about 20% lower than the KPMG offer, or put another way, KPMG would be a 25% increase in fixed gross salary.

KPMG offer:
The offer is for an IT Audit role in Barcelona, in an audit/controls department, at Staff I level. It would be an indefinite full-time contract.

Main points:

• Big 4 brand name, likely stronger CV signal.
• IT audit / controls role, probably more structured and corporate.
• Fixed salary is 25% higher than my current fixed salary.
• 31 working days of vacation, which is 5 more days than my current package.
• Flexible compensation options: transport, meal card, health insurance, training, childcare, etc.
• Remote work only when the project allows, plus up to 4 weeks working from anywhere in Spain.
• Schedule seems more fixed: long standard days most of the year, but Fridays are shorter and summer schedule is better.

My main doubt is career direction. I’m interested in cybersecurity, GRC, IT audit and regulatory work, but I don’t want to move into a role that becomes too narrow or too “checklist audit” if it slows down my cybersecurity growth. On the other hand, KPMG could give me stronger brand recognition, more exposure to large clients, and a higher salary.

For those who have worked in Big 4 IT audit, cybersecurity consulting, GRC, or similar roles:
Would you choose the cybersecurity-focused role with lower pay but more direct cyber/GRC exposure, or KPMG IT Audit for the brand, salary increase and structured career path?

Any thoughts on long-term career impact, exit opportunities, work-life balance, and whether Big 4 IT Audit is worth it early in a cybersecurity/GRC career would be really helpful.

Thanks!