Information Security Auditor | IT Risk Advisor role based in Sofia, Bulgaria with a hybrid work arrangement. The KPMG Delivery Network Bulgaria is seeking a seasoned professional to safeguard clients' systems by ensuring effective controls and regulatory compliance across international and EU frameworks. You will analyze and assess customers’ technological and business-critical IT infrastructures to ensure processes and systems run accurately and efficiently. Responsibilities include evaluating ISO 27001, NIST, COBIT and other relevant standards, and interpreting EU directives such as NIS, NIS2, DORA, EU AI Act, Cyber Resilience Act and EU Data Act. You will consult on ERP migrations, develop, implement, test and evaluate audit review procedures, and support process digitalization and optimization projects. The role also involves mentoring junior team members and helping them grow their skills. Qualifications include hands-on experience in multiple assurance engagements and ISO compliance projects, deep knowledge of regulatory frameworks and methodologies, familiarity with GDPR and DORA, and strong IT risk management and internal controls expertise. Fluency in English is required; German language skills are a plus. We offer a hybrid working policy, opportunities to develop expertise in digital compliance, IT audit and IT security, ongoing trainings and certifications, career progression, and a comprehensive benefits package including health and life insurance. KPMG Delivery Network Bulgaria is committed to diversity and inclusion and to an inclusive workplace.

Information Security Auditor | IT Risk Advisor role based in Sofia, Bulgaria with a hybrid work arrangement. The KPMG Delivery Network Bulgaria is seeking a seasoned professional to safeguard clients' systems by ensuring effective controls and regulatory compliance across international and EU frameworks. You will analyze and assess customers’ technological and business-critical IT infrastructures to ensure processes and systems run accurately and efficiently. Responsibilities include evaluating ISO 27001, NIST, COBIT and other relevant standards, and interpreting EU directives such as NIS, NIS2, DORA, EU AI Act, Cyber Resilience Act and EU Data Act. You will consult on ERP migrations, develop, implement, test and evaluate audit review procedures, and support process digitalization and optimization projects. The role also involves mentoring junior team members and helping them grow their skills. Qualifications include hands-on experience in multiple assurance engagements and ISO compliance projects, deep knowledge of regulatory frameworks and methodologies, familiarity with GDPR and DORA, and strong IT risk management and internal controls expertise. Fluency in English is required; German language skills are a plus. We offer a hybrid working policy, opportunities to develop expertise in digital compliance, IT audit and IT security, ongoing trainings and certifications, career progression, and a comprehensive benefits package including health and life insurance. KPMG Delivery Network Bulgaria is committed to diversity and inclusion and to an inclusive workplace.