Cyber Security Project Manager

The world of global advisory, audit and tax compliance services for large multi-nationals is rapidly changing and heavily dependent on technology. The KPMG Delivery Network (KDN) is a KPMG special purpose member firm offering a way for clients to leverage KPMG top talent and technology platforms through regional teams of specialists, enabling economies of scale and a new way of working that expands beyond local capability.

Together with KDN, KPMG member firms can drive the sales and delivery of global solutions at a competitive price and in a repeatable and consistent manner. As a member of KDN, you’ll be a part of the KPMG family working alongside some of our profession’s most skilled practitioners on rewarding programs and initiatives that are changing the way business operates, delivering value to our clients, and driving positive change in the communities we serve. You’ll be enabling KDN accelerate new ways of working, using cutting-edge technology and working together with our member firms located in nearly 145 countries to help us achieve our ambition to be the most trusted and trustworthy professional services firm. And through your work, you’ll build a global network and unlock opportunities that you may not have thought possible with access to great support, vast resources, and an inclusive, supportive environment to help you reach your full potential.

We are seeking a strategic, results-driven Principal Cybersecurity Project Manager / PMO Lead to oversee and drive our enterprise-wide vulnerability management initiatives. This senior leadership role sits at the intersection of cybersecurity, IT operations, and program governance. You will lead the Vulnerability Management PMO function, manage cross-functional security projects from planning through execution, and ensure alignment with the organization’s overall risk management strategy.

This position is essential to improving our cybersecurity posture, supporting compliance requirements, and driving continuous improvement in vulnerability identification, prioritization, and remediation efforts across the enterprise.

• →Project Management: Lead the end-to-end delivery of cybersecurity initiatives, ensuring alignment with enterprise objectives, MDR strategy, and regulatory requirements
• →Cyber Program Governance: Establish and oversee governance structures, reporting mechanisms, and risk management processes to support MDR and broader cybersecurity programs
• →Stakeholder Engagement: Serve as the primary liaison for senior stakeholders, providing clear and timely communication on progress, risks, and dependencies
• →Security Management: Coordinate and lead scoping sessions, intake discussions, and alignment activities with internal teams and external partners
• →Compliance & Standards: Ensure adherence to cybersecurity best practices and standards (e.g., NIST, ISO 27001) and maintain compliance with internal frameworks and regional regulations
• →Team Setup & Enablement: Participate in the setup of a MDR Team in KDN Sofia office and support the fostering of a culture of accountability, collaboration, and continuous improvement
• →Process Optimization: Identify and implement opportunities to streamline processes within the MDR program, enhancing efficiency and effectiveness

• Master’s degree in Cybersecurity, Computer Science, or related field
• Project Management certifications: PMP and/or PRINCE2 Practitioner is a must
• Agile certifications: PMI-ACP, CSM, PSM or equivalent
• Cybersecurity certifications: CISSP, CISM, CISA, OSCP
• Minimum 10+ years of project/program management experience, including 5+ years in cybersecurity
• Proven expertise in Agile and hybrid delivery models
• Proficiency with MS Project, Azure DevOps, Jira, Confluence
• Strong communication and leadership skills in client-facing environments
• Proactive, self-driven approach to problem-solving and team coordination
• Demonstrated experience leading security projects, including penetration testing engagements
• Solid understanding of compliance requirements within the European Economic Area (EEA), particularly for high-security environments