AI Governance & GRC Specialist

KPMG IT Service OOD is an IT service provider with a mission to digitalize the core business of KPMG IT Service GmbH and KPMG AG in Germany and their clients across the globe. We employ around 200 people in Sofia and deliver the full spectrum of IT services to our clients, including Software Engineering, Application & Platform Operations, Infrastructure and Cloud and Digital Process Compliance.

We are looking to hire an ambitious and forward-thinking professional to join our Digital Process Compliance team and support the internal implementation of ISO/IEC 42001 within KPMG IT Service. The role focuses on establishing and continuously improving an Artificial Intelligence Management System, translating the standard's requirements into practical governance processes, controls and documentation, and coordinating implementation activities with stakeholders in Germany.

We welcome candidates with backgrounds in AI governance, information security, compliance, risk management, audit, quality management, project management or related technology disciplines. Practical understanding of ISO/IEC 42001 and the ability to coordinate stakeholders and drive implementation activities are central to this role.

The role

Are you a motivated professional with a good understanding of ISO 42001 and an interest in responsible AI governance? Do you enjoy translating standards into practical processes, coordinating stakeholders and helping an organization establish a structured management system?

If so, this may be a role for you!

The role initially focuses on the implementation and continuous improvement of an Artificial Intelligence Management System (AIMS) in accordance with ISO/IEC 42001. Following the implementation phase, the successful candidate will contribute to a broader portfolio of Governance, Risk and Compliance (GRC) initiatives, supporting the development of management systems, governance frameworks, internal controls, risk management activities and digital compliance programs across the organization.

This position offers a unique opportunity to combine emerging AI governance topics with broader governance and compliance responsibilities, helping shape the organization's approach to responsible technology adoption, digital risk management and operational excellence.

As an AI Governance Specialist, you will focus on:

• Supporting the internal implementation and further development of an Artificial Intelligence Management System in accordance with ISO/IEC 42001
• Translating ISO/IEC 42001 requirements into practical governance processes, policies, controls, roles and supporting documentation
• Performing gap assessments and supporting the definition, prioritization and tracking of implementation measures
• Coordinating implementation activities, deliverables, dependencies and follow-up actions across relevant functions
• Collaborating closely with stakeholders in Germany and acting as a reliable interface between business, technology, risk, compliance and governance teams
• Facilitating workshops, status meetings and stakeholder discussions related to AI governance and the ISO/IEC 42001 implementation
• Supporting the identification and assessment of AI-related risks, impacts, opportunities and control requirements
• Contributing to the establishment of clear governance structures, responsibilities, monitoring activities and continuous improvement mechanisms
• Preparing high-quality implementation documentation, management updates and materials for internal reviews and assessments
• Supporting awareness and knowledge-sharing activities related to responsible AI and the requirements of ISO/IEC 42001

Beyond AI Governance, you will also:

• Support governance, risk and compliance initiatives related to technology, information security, internal controls and operational governance, including the establishment and improvement of policies and procedures
• Contribute to the design, implementation and continuous improvement of internal governance frameworks, policies and management systems
• Support risk assessments, control evaluations and governance reviews across various business and technology functions
• Participate in both internal and client facing digital process compliance engagements
• Identify opportunities to streamline governance processes and improve organizational effectiveness through innovative approaches and technology enablement
• Support the adoption of emerging technologies by assessing governance, compliance and risk implications
• Contribute to the development of governance-related methodologies, guidance materials and internal best practices

What you bring in:

Required:

• University degree in Information Technologies, Artificial Intelligence, Cyber Security, Business, Economics, Risk Management, Compliance, Audit or a related discipline
• Good understanding of the ISO/IEC 42001 standard and its requirements for Artificial Intelligence Management Systems
• Fluency in English is required
• Experience coordinating projects, workstreams or transformation initiatives involving multiple stakeholders
• Ability to manage implementation plans, dependencies, milestones, risks and actions
• Strong organizational and prioritization capabilities in dynamic environments
• Experience facilitating workshops, steering committees and governance forums
• Ability to translate standard requirements into practical processes, controls and implementation activities
• Strong analytical and problem-solving capabilities in complex environments
• Structured and organized approach with the ability to coordinate multiple stakeholders, deliverables and follow-up actions
• Strong communication and stakeholder management skills, including effective collaboration with remote and cross-functional teams
• Personal drive, ownership and a positive work ethic to deliver high-quality results
• Strong learning agility and the ability to quickly understand new regulatory requirements, technologies and organizational processes
• Innovative and solution-oriented mindset with a focus on continuous improvement and sustainable implementation

Beneficial:

• Practical experience with the implementation, operation or assessment of management systems based on ISO standards
• Experience in AI governance, responsible AI, model risk management, data governance, information security, compliance, internal controls or audit
• Project management or project coordination experience, including planning, tracking actions and reporting progress
• Experience collaborating with stakeholders in Germany or within international and cross-functional teams
• German language skills are considered an advantage but are not mandatory
• Knowledge of related standards, frameworks or regulations such as ISO/IEC 27001, NIST AI RMF or the EU AI Act
• Relevant professional training or certification in ISO/IEC 42001, AI governance, information security, risk management, compliance or project management

What we offer:

• The opportunity to work in a highly talented team part of a global organization
• Attractive remuneration
• Opportunity to become one of the organization's subject matter experts in AI governance while developing broader expertise across Governance, Risk & Compliance, technology governance, digital transformation and emerging regulatory requirements
• The role offers significant exposure to strategic initiatives and international stakeholders
• Opportunity for continuous training, learning and certification
• Close collaboration with international stakeholders and exposure to a strategic internal implementation initiative
• Modern office environment
• Additional health insurance
• Life insurance
• 50+ benefits and services to choose from
• Hybrid working policy

If you are interested in further exploring this career opportunity, please send us your CV.

Only shortlisted candidates will be contacted.