Skip to main content

      Gergana is an IT and cyber security professional who works with clients to design creative, pragmatic approaches to reducing cyber, AI and data‑security risks. 

      She partners with organisations to uplift their security posture, strengthen governance, and achieve sustainable cyber‑resilient outcomes. Gargana firmly believes that cyber security is a business enabler – an intrinsic capability that helps organisations innovate, grow, and stay competitive.

      As a recognised leader in the cybersecurity community across Australia and Asia, Gergana has served as an AISA National Board Member as an ISACA Sydney Board Member and Nomination Committee Member for the ISACA Sydney Board more recently, contributing to the advancement of industry standards, governance practices, and professional development in the sector.

      She is also a sought‑after keynote speaker on cyber security, privacy, and risk, and continues to mentor emerging professionals and advocate for diversity in the industry.

      At KPMG, Gergana is deeply committed to the mid‑market, a segment she has championed throughout her tenure. She has built specialised services tailored specifically for mid‑market organisations, recognising their unique constraints, regulatory pressures, and need for right‑sized, commercially aligned security solutions. As part of this work, she established and scaled KPMG’s VCISO offering, supporting a wide range of clients in developing fit‑for‑purpose security functions, uplifting control effectiveness, improving maturity, and enhancing board and executive confidence in their security programs.

      Over the years, Gergana has consistently delivered measurable impact for mid‑market clients, including:

      • significant uplift in cyber and risk maturity
      • improved control‑effectiveness ratings aligned to regulatory expectations
      • pragmatic, actionable cyber‑uplift roadmaps that deliver real business value
      • stronger governance models and operating structures
      • enhanced reporting transparency to boards, executives and regulators
      • and most importantly, improved confidence in dealing and managing cyber risks.

      Prior to joining KPMG, Gergana served as Industry Director for Cyber Security, Asia Pacific for a global IT solutions provider, where she led regional cyber initiatives and supported clients across multiple industries on their transformation journeys.

      1. Areas of expertise
        • AI risk and governance
        • Cyber Security
        • Data risk
        • IT Management
        • Privacy
        • Risk Management
        • Technology risk
        • Transformation
      2. Education & qualifications
        • Cyber Leadership Institute
        • Computer and Information Systems Security/Information Assurance, Charles Sturt University
        • Bulgarian Philology, South-West University Neofit Rilsky
      3. Accreditations
        • PCI DSS Awareness Training, PCI Security Standards Council
        • ISO 27001
        • Incident Response