KPMG IT Service OOD is an IT service provider with a mission to digitalize the core business of KPMG IT Service GmbH and KPMG AG in Germany and their clients across the globe. We employ around 200 people in Sofia and deliver the full spectrum of IT services to our clients, including Software Engineering, Application & Platform Operations, Infrastructure and Cloud and Digital Process Compliance.
We are looking to hire an ambitious and forward-thinking person to join our team of digital process compliance consultants. The role focuses on assessing and improving governance frameworks, business and IT processes, risk management practices, and regulatory compliance across international organizations. You will work with clients in evaluating both business and technology-related risks, supporting compliance with regulations, industry standards, and leading practices.
We welcome candidates from business, finance, accounting (etc.) and technology backgrounds. Whether your experience is in audit, internal controls, business process management, risk management, compliance, cybersecurity, ERP systems or IT governance, we encourage you to apply.
The role
Are you a motivated professional with experience in business processes, risk management, internal controls, audit, compliance, or IT governance? Do you enjoy understanding how business operations and technology work together to manage risk and achieve organizational objectives?
If so, this may be a role for you!
As a Junior IT Governance, Risk & Compliance (GRC) Specialist, you will help international organizations strengthen their governance, risk management and compliance capabilities across business and technology environments. Working with cross-functional teams, you will assess business processes, internal controls, IT systems and security frameworks while supporting compliance with international standards, regulations and industry-leading practices.
As an IT Governance Risk and Compliance Specialist, you will focus on:
- Being part of cross-national and cross-functional teams working to analyze and evaluate IT processes and security structures in accordance with relevant control frameworks, standards and assurance methodologies including General IT Controls (GITCs), SOC 1, SOC 2, ISAE 3402, ISAE 3000, BSI C5, ISO 27001, ISO 42001 and ISO 22301
- Working with leading international organizations across multiple industries, helping them improve governance, risk management, compliance, resilience and digital trust
- Providing professional advice to clients through constant collaboration and assisting in implementing best practices for IT processes and security based on guidelines and frameworks including NIST, COBIT5, ITIL
- Exposure to emerging areas such as Artificial Intelligence Governance (ISO 42001), Digital Operational Resilience (DORA) and Cybersecurity Regulation (NIS2).
- Assessing, addressing and coordinating related business and system risks
- Performing risk and gap assessments for end-to-end business processes such as Procure-to-Pay (P2P), Quote-to-Cash (Q2C), Record-to-Report (R2R) etc, and related IT systems
- Assessing governance, risk management and internal control frameworks across business and IT processes
- Contributing to compliance programs, control design reviews, and process improvement initiatives
- Supporting clients in identifying, documenting and mitigating operational, regulatory and technology risks
- Collaborating closely with KPMG colleagues in Germany and other international locations as part of project delivery
What you bring in:
Required:
- University degree in Information Technologies, Cyber Security, Economics, Finance, Accounting, Business or Audit and Compliance related discipline
- Fluency in German and English is required
- Strong analytical and problem-solving skills, with the ability to navigate complex environments and develop effective solutions
- Customer-focused mindset with excellent stakeholder management, collaboration, and networking skills, enabling the delivery of trusted, value-driven advisory services
- Strong learning agility and adaptability, with the ability to quickly understand new technologies, regulatory requirements, and business processes, while embracing digital innovation and continuous improvement
- Commercial awareness and business acumen, with the ability to identify growth opportunities, contribute to strategic initiatives, and create value for clients
- Proactive and results-oriented approach, demonstrating ownership, innovation, and a drive to improve processes and ways of working
Beneficial:
- Interest in governance, risk management, compliance, internal controls, audit, and related control frameworks, standards, and assurance methodologies, such as GITCs, SOC 1 and SOC 2, ISAE 3402 and ISAE 3000, BSI C5, and ISO 27001, ISO 42001, and ISO 22301
- Desire to gain professional experience in business and IT risk, controls, compliance, audit, and governance, including business processes such as Finance, Record-to-Report (R2R), Procure-to-Pay (P2P), Quote-to-Cash (Q2C), Supply Chain, and Human Resources
What we offer:
- The opportunity to work in a highly talented team part of a global organization
- Attractive remuneration
- Build expertise in emerging technologies, digital governance and compliance.
- Opportunity for continuous training, learning and certification
- Working on challenging projects with clients in various industries across the globe
- Modern office environment
- Additional health insurance
- Life insurance
- 50+ benefits and services to choose from
- Hybrid working policy
If you are interested in further exploring this career opportunity, please send us your CV.
Only shortlisted candidates will be contacted.
