Tamta Kalandarishvili
Senior Consultant Technology Risk
Mannheim
Summary
Security & Compliance professional with international experience in Germany and the USA, with a professional background at EY, BDO USA LLP, and KPMG. Skilled in governance frameworks, enterprise risk assessments, compliance audits, and GRC enablement within highly regulated industries. Adept at stakeholder engagement, control design & testing, and translating regulatory requirements into actionable processes. Combining audit-rigorous, controls-driven expertise with a strong understanding of global compliance frameworks and their practical implementation.
Overview
7
7
years of professional experience
Work History
Senior Consultant Technology Risk Assurance
Ernst & Young Wirtschaftsprüfungsgesellschaft GmbH
2025.03 - Current
- Supported GRC enablement in the Life Sciences sector, translating business requirements into effective controls.
- Defined workflows for evidence collection, remediation tracking, and compliance monitoring to ensure audit readiness.
- Facilitated workshops with cross-functional stakeholders and provided clear, tailored reporting to senior management.
- Conducted ISAE 3402 and S/4HANA migration audits and reports
Experienced Associate, Information Systems Assurance
BDO USA LLP
2023.02 - 2024.12
- Performed ITGC testing and risk assessments, consolidating findings into clear, remediation-ready recommendations.
- Conducted stakeholder interviews across industries, ensuring compliance with regulatory and security frameworks.
- Supported audit strategy design by synthesizing control exceptions and aligning recommendations with compliance requirements.
Associate, Digital Compliance
KPMG AG Wirtschaftsprüfungsgesellschaft
2022.04 - 2022.09
- Executed IT audits and compliance assessments, with a focus on SOX IT control design and operating effectiveness testing.
- Evaluated and enhanced IT control environments to ensure alignment with regulatory and audit standards.
- Supported a client in the telecommunications industry during a large-scale software transformation project, ensuring key processes were SOX-compliant and audit-ready.
Working Student, Government Security & Secrecy
SAP SE
2021.09 - 2022.03
- Supported research and analysis of critical infrastructure and national security regulations across jurisdictions.
- Maintained an internal regulatory knowledge base to support enable cross-department knowledge sharing.
Working Student, Compliance
Heidelberg Materials AG
2019.03 - 2019.08
- Contributed to quarterly board compliance reports on human rights and regulatory risk.
- Developed an e-learning module on German antitrust law and prepared compliance briefings on AML/CFT and data protection.
Education
Master of Arts - Political Science
Ruprecht-Karls-Universität Heidelberg
Heidelberg2025-01
Bachelor of Arts - Political Science
Ruprecht-Karls-Universität Heidelberg
Heidelberg2017-01
Skills
IT Skills: Microsoft 365 Google Docs Sharepoint Confluence JIRA
Languages: German (Native) English (fluent) Georgian (Native)
Timeline
Senior Consultant Technology Risk Assurance
Ernst & Young Wirtschaftsprüfungsgesellschaft GmbH
2025.03 - Current
Experienced Associate, Information Systems Assurance
BDO USA LLP
2023.02 - 2024.12
Associate, Digital Compliance
KPMG AG Wirtschaftsprüfungsgesellschaft
2022.04 - 2022.09
Working Student, Government Security & Secrecy
SAP SE
2021.09 - 2022.03
Working Student, Compliance
Heidelberg Materials AG
2019.03 - 2019.08
Master of Arts - Political Science
Ruprecht-Karls-Universität Heidelberg
Bachelor of Arts - Political Science
Ruprecht-Karls-Universität Heidelberg