IT Risk Consultant/Senior IT Risk Consultant

The world of global advisory, audit and tax compliance services for large multi-nationals is rapidly changing and heavily dependent on technology.

The KPMG Delivery Network (KDN) is a KPMG special purpose member firm offering a way for clients to leverage KPMG top talent and technology platforms through regional teams of specialists, enabling economies of scale and a new way of working that expands beyond local capability

Together with KDN, KPMG member firms can drive the sales and delivery of global solutions at a competitive price and in a repeatable and consistent manner. As a member of KDN, you’ll be a part of the KPMG family working alongside some of our profession’s most skilled practitioners on rewarding programs and initiatives that are changing the way business operates, delivering value to our clients, and driving positive change in the communities we serve.

You’ll be enabling KDN to accelerate new ways of working, using cutting-edge technology and working together with our member firms located in nearly 150 countries to help us achieve our ambition to be the most trusted and trustworthy professional services firm.

And through your work, you’ll build a global network and unlock opportunities that you may not have thought possible with access to great support, vast resources, and an inclusive, supportive environment to help you reach your full potential.

Are you an experienced IT Risk consultant passionate about helping organizations navigate technology risk, regulatory complexity and digital transformation?

Do you want to work in an international environment where you help clients build reliable, resilient and well-governed technology-enabled processes, embed risk and compliance into day-to-day operations, and protect critical services, data and customer trust?

Join our team and support clients in transforming regulatory and technology challenges into practical governance, risk and control solutions across IT, cyber, privacy, third-party ecosystems and emerging technologies.

As an IT Risk consultant, you will focus on:

• IT Risk & Controls Advisory – Design, assess and enhance IT risk and control frameworks, including risk assessments, governance models, lifecycle controls and technology-enabled business processes.
• Regulatory & Compliance Advisory – Help clients interpret and operationalize requirements arising from DORA, NIS2, EU AI Act, Cyber Resilience Act, EU Data Act, GDPR and other relevant regulations.
• GRC Frameworks & Standards – Assess and support implementation of recognized frameworks and standards such as ISO 27001, ISO 22301, ISO 9001, COBIT, NIST and ITIL.
• Cyber & Privacy Governance – Support information security, privacy and data governance models, embedding security and privacy requirements into business and IT processes.
• Third-Party & Ecosystem Risk Management – Help organizations manage vendor and ICT third-party risk across the full lifecycle, from risk assessment and onboarding through contracting, monitoring, renewal and exit.
• Technology & ERP Transformation Risk – Advise clients throughout ERP and technology transformation initiatives, helping integrate governance, risk, controls, security and business continuity into transformation programs.
• Business Resilience & Continuity – Help integrate risk, security and third-party dependencies into resilience, incident, continuity and exit planning.
• GRC Transformation & Digitalization – Support the digitalization, automation and optimization of risk, control and compliance processes, including technology-enabled GRC solutions.
• Emerging Technology & AI Governance – Support responsible adoption of emerging technologies, including AI governance, risk management, security and regulatory compliance.

• Hands-on experience in GRC, IT risk, cyber risk, regulatory compliance, IT controls, information security governance, technology risk or related advisory areas.
• Strong knowledge of one or more regulatory frameworks and standards, such as DORA, NIS2, GDPR, EU AI Act, ISO 27001, ISO 22301, COBIT, NIST or ITIL.
• Good understanding of IT risk management, internal control frameworks and technology governance.
• Experience in assessing, designing or implementing risk, control and compliance processes.
• Understanding of business and IT processes and their importance for operational resilience, regulatory compliance and effective technology governance.
• Exposure to third-party risk management, cyber and privacy governance, ERP transformation, business continuity or service management is considered an advantage.
• Experience with GRC or workflow platforms such as ServiceNow GRC/IRM or comparable solutions is an advantage.
• Ability to translate complex regulatory and technical requirements into practical processes, controls and actionable recommendations.
• Strong analytical, communication and stakeholder-management skills.
• Fluency in English is required.
• Fluency in German is considered a major advantage

Certifications considered an advantage

Relevant professional certifications are highly valued, including:

• Cyber & IT Governance: ISO 27001, ISO 22301, ISO 9001, CISA, GDPR/privacy, DORA, NIST and NIS2-related qualifications
• Cloud & Technology: Microsoft certifications such as AZ-104, AZ-900, AZ-500 and AI-900
• Other recognized certifications in GRC, cybersecurity, privacy, risk management, resilience or technology governance

What we offer:

• The chance to work in a top talented team being part of an international and multicultural organization
• The opportunity to develop strong expertise in a fast pace industry segment in the area of digital compliance, IT audit and IT security
• Enhanced knowledge in cutting-edge technologies
• Ongoing trainings, certifications and continuous learning and development opportunities setting a clear career path
• Work on challenging projects
• Attractive remuneration
• Additional health insurance
• Life insurance
• 50+ benefits and services to choose from
• Hybrid working policy

KPMG Delivery Network Bulgaria is committed to building a diverse, equitable and truly inclusive company. We actively encourage diversity and inclusion, while opposing all forms of unlawful and unfair discrimination on the grounds of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. Join us, and let us write your next chapter together!

© 2026 KPMG Delivery Network Ltd., a member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved. The KPMG name and logo are registered trademarks or trademarks of KPMG International.