Internships

KPMG Technology Risk Graduate Programme FY2027 – Graduate Opportunities in Johannesburg and Cape Town

KPMG Technology Risk Graduate Programme FY2027 – Graduate Opportunities in Johannesburg and Cape Town
Written by Sifiso Mhlongo

 

KPMG is inviting suitably qualified graduates with backgrounds in technology, information systems, informatics and internal audit to apply for its Technology Risk Graduate Programme FY2027 in South Africa.

The programme offers graduates an opportunity to begin building professional experience at the intersection of technology, business, risk, audit, cybersecurity, data and emerging technologies. Opportunities have been advertised for both Johannesburg and Cape Town.

For graduates who have studied Computer Science, Information Technology, Information Systems, Informatics or certain Internal Audit programmes, this is an opportunity worth considering — particularly if you are interested in how organisations manage technology risks rather than pursuing a purely software-development career.

This article breaks down what KPMG has officially stated about the programme, who may qualify, what Technology Risk actually involves, and how graduates can prepare stronger applications.

Quick Overview

  • Organisation: KPMG
  • Programme: Technology Risk Graduate Programme FY2027
  • Programme type: Graduate Programme
  • Field: Technology Risk / Advisory
  • Locations: Johannesburg and Cape Town
  • Johannesburg Job Number: 26000019
  • Cape Town Job Number: 2600001S
  • Target applicants: Graduates in specified technology, information systems and internal audit fields
  • Business area: Advisory – Technology Risk
  • Closing date: Not specified in the information supplied
  • Programme year: FY2027

Applicants should always verify the current application status and any deadlines on KPMG’s official recruitment platform before submitting an application.

What Does KPMG Technology Risk Do?

KPMG’s Technology Risk division assists clients in achieving business objectives while navigating technological challenges.

The work can include using data and analytics to better understand clients’ environments and provide stronger insights.

Technology Risk teams can also support external audit approaches by using IT and emerging technologies.

Other areas mentioned by KPMG include:

  • IT risk and controls assessments;
  • designing and implementing system-based internal controls;
  • responding to cyber-attacks;
  • supporting business resilience;
  • evaluating risks associated with emerging technologies;
  • Cloud technology;
  • Robotic Process Automation (RPA);
  • Artificial Intelligence (AI); and
  • Blockchain.

This breadth is important for applicants to understand.

The graduate programme is not simply an opportunity for people who “like computers.” It sits at the intersection of technology, governance, controls, business processes, risk and assurance.

What Is Technology Risk?

Technology Risk concerns the potential problems organisations face because of their reliance on technology.

Imagine a major company using an enterprise system to process thousands or millions of transactions. The organisation needs confidence that the system is secure, properly controlled and producing reliable information.

Technology Risk professionals may therefore consider questions such as:

  • Who has access to important systems?
  • Are access permissions appropriate?
  • Can unauthorised users alter sensitive information?
  • Are changes to critical systems properly tested and approved?
  • What happens if an important system becomes unavailable?
  • Are technology controls operating as intended?
  • What risks arise when a company migrates systems to the cloud?
  • How should an organisation manage risks associated with AI?
  • Are automated processes appropriately governed?
  • Can the organisation recover effectively from a cyber incident?

The precise work performed by a graduate will depend on the engagement and team. The official programme information does not provide a fixed day-to-day task list.

Why This Programme Could Be Valuable for Technology Graduates

Many graduates automatically associate technology qualifications with careers such as:

  • Software Developer
  • Programmer
  • Network Engineer
  • Systems Administrator
  • Data Analyst
  • Cybersecurity Analyst

Those are important career paths, but technology qualifications can also open doors into technology consulting, governance, assurance and risk.

KPMG’s programme can expose graduates to both the technical and business sides of technology.

According to KPMG’s description, participants will be introduced to the working world and may interact with senior executives in the IT and finance industries.

Graduates can also receive on-the-job learning and coaching from a diverse team while developing skills relevant to the changing technology environment.

That exposure can be particularly useful for graduates who enjoy technology but are equally interested in business, problem-solving, consulting, risk and working with clients.

Official Qualification Requirements

The following qualifications were specifically listed in the programme information supplied by KPMG.

Johannesburg Technology Risk Graduate Programme

Job Number: 26000019

Applicants with the following qualifications are listed:

  • BSc Computer Science
  • BSc Information Technology
  • BSc Information Systems
  • BCom Informatics
  • B.IT
  • Internal Audit (Honours/PGDA)

Cape Town Technology Risk Graduate Programme

Job Number: 2600001S

The Cape Town listing specifies:

  • BSc Computer Science / Information Technology
  • BSc Information Systems / BCom Informatics
  • Bachelor in Information Technology
  • Internal Audit (Honours/PGDA)

These are the qualifications explicitly stated in the vacancy information provided to Edupstairs.

Applicants with related but differently named qualifications should not automatically assume eligibility. If your qualification is not listed, check the official KPMG application page for any additional guidance rather than claiming equivalence yourself.

Skills and Attributes KPMG Is Looking For

Qualifications are only part of the picture.

KPMG specifically identifies several personal and professional attributes.

Interest in Technology Risk

Applicants should demonstrate a genuine interest in Technology Risk.

This means understanding, at least at graduate level, that the profession involves more than general IT.

Before applying or attending an interview, familiarise yourself with concepts such as:

  • IT governance;
  • information security;
  • cybersecurity;
  • IT controls;
  • technology assurance;
  • cloud risks;
  • data analytics;
  • business continuity;
  • access management;
  • artificial intelligence risks; and
  • technology-related business risks.

You do not necessarily need to be an expert in all these areas as a graduate applicant. However, being able to explain why Technology Risk interests you could make your application more convincing.

Teamwork

KPMG says it is looking for a high-performing team player who can also work independently.

Professional services environments frequently require employees to collaborate with colleagues and clients while remaining responsible for their own deliverables.

Being able to balance independence and teamwork is therefore important.

Adaptability

Technology changes quickly.

KPMG specifically wants candidates who can be agile and adapt to changing environments.

That makes sense in an area dealing with technologies such as AI, Cloud, RPA and other emerging systems.

Problem-Solving Ability

Applicants should be capable of identifying problems, tracing them to their root causes and recommending solutions.

This is a significant clue about what graduates should demonstrate during recruitment.

Do not simply present yourself as someone who knows technology.

Show that you can analyse problems.

Edupstairs Application Guidance

The following section is Edupstairs guidance for applicants and should not be confused with KPMG’s official eligibility criteria.

Tailor Your CV to Technology Risk

Avoid submitting a completely generic graduate CV if you can tailor it appropriately.

Your CV should make it easy for a recruiter to identify:

  • your qualification;
  • university;
  • graduation or expected graduation date;
  • relevant modules;
  • academic projects;
  • technology skills;
  • analytical experience;
  • teamwork experience; and
  • any relevant internships or work experience.

Relevant modules could include areas such as information systems, databases, cybersecurity, auditing, programming, data analytics, systems analysis or IT governance, depending on what you actually studied.

Never add technologies or competencies that you cannot confidently discuss during an interview.

Don’t Assume You Need Years of Experience

This is advertised as a Graduate Programme.

The supplied vacancy information does not state that applicants need several years of professional Technology Risk experience.

Your university projects, assignments and practical coursework can therefore be useful evidence of your capabilities.

For example, if you completed a project involving a database, information system, security assessment, data analysis or business process, explain what problem you addressed and what you personally contributed.

Research Technology Risk Before an Interview

One mistake graduates can make is applying simply because “KPMG is a big company.”

Recruiters may want to understand why you are interested in this particular field.

Prepare a clear answer to:

Why Technology Risk?

A stronger answer connects your academic background, interests and career goals with the actual work performed by Technology Risk professionals.

For example, someone studying Information Systems might be interested in understanding how organisations implement technology while maintaining appropriate controls and managing operational risks.

A Computer Science graduate may be interested in the security, systems and emerging-technology side of risk.

An Internal Audit graduate may be interested in the relationship between technology, controls, governance and assurance.

Your answer should reflect your own experience.

Technologies Applicants Should Understand

KPMG specifically mentions several emerging technologies.

Cloud

Organisations increasingly operate applications and infrastructure through cloud environments. This introduces questions involving security, governance, access, resilience and data protection.

Artificial Intelligence

AI can improve productivity and decision-making, but it can also introduce governance, privacy, accuracy, bias, security and operational risks.

Robotic Process Automation

RPA allows organisations to automate repetitive business processes.

Automation can improve efficiency, but organisations still need appropriate controls around automated activities.

Blockchain

Blockchain technologies introduce different considerations involving governance, security, transactions and controls.

You do not need to claim expertise in these technologies simply because they appear in the advert.

Instead, understand why organisations need to assess the risks associated with adopting them.

How to Apply

Applications should be submitted through the official KPMG recruitment process for the relevant vacancy.

Johannesburg: Technology Risk Graduate Programme – JHB FY2027- Job Number: 26000019

Cape Town: Technology Risk Graduate Programme – CT FY2027 – Job Number: 2600001S

Before submitting your application:

  • Check that you selected the correct location.
  • Confirm that your qualification meets the stated requirements.
  • Update your CV.
  • Check spelling and contact details.
  • Ensure that any requested documents are attached.
  • Follow the official application instructions exactly.
  • Verify whether a closing date has subsequently been published.

The information supplied to Edupstairs did not specify a closing date, so applicants should not rely on an invented deadline.

Apply as early as reasonably possible while the vacancy remains open.

Common Application Mistakes to Avoid

Graduate opportunities at major professional services firms can attract significant interest. Avoid preventable errors.

Applying without understanding Technology Risk

Research the profession before applying.

Using an unrelated generic CV

Highlight relevant education, projects and technical or analytical competencies.

Exaggerating technical skills

If you put Python, SQL, cybersecurity, cloud computing or another technology on your CV, be prepared to discuss your actual level of knowledge.

Ignoring the job number

Johannesburg and Cape Town have different job numbers.

Applying for the wrong location

Double-check the vacancy before submission.

Waiting unnecessarily

If applications are already open, delaying until an assumed closing date can create unnecessary risk.

Possible Career Value of Technology Risk Experience

Technology Risk can build transferable knowledge across several areas of the modern economy.

Depending on a person’s subsequent experience, professional development and specialisation, exposure to this field can potentially support career development in areas such as:

  • Technology Risk
  • IT Audit
  • IT Governance
  • Cybersecurity Risk
  • Technology Consulting
  • Internal Audit
  • Risk Advisory
  • Information Security Governance
  • Controls Assurance
  • Data and Technology Assurance

These are possible career directions rather than guaranteed outcomes of the KPMG programme.

Your longer-term opportunities will depend on your performance, skills, experience, qualifications and career choices.

Tools you may find useful:

View Other Employment Opportunities here

Need Help?

Edupstairs Advice

Do not dismiss this opportunity because you think your technology degree means you must become a software developer.

Technology careers have expanded far beyond coding.

Banks, government departments, retailers, telecommunications companies, consulting firms and other major organisations depend on complex technology environments. Those systems create demand for professionals who understand both technology and organisational risk.

If you meet the qualification requirements, spend time understanding Technology Risk before submitting your application.

Then tailor your CV so that your academic projects, analytical abilities and technology knowledge support the story you are telling the recruiter.

Most importantly, be accurate.

A graduate applicant is not expected to have mastered an entire profession already. Showing genuine curiosity, analytical thinking and a willingness to learn is more credible than claiming expertise you do not yet have.

Frequently Asked Questions

  1. What is the KPMG Technology Risk Graduate Programme FY2027?

It is a graduate opportunity within KPMG’s Technology Risk environment, which forms part of Advisory. The programme introduces graduates to professional work involving technology risks, controls, assurance and emerging technologies.

  1. Where are the graduate opportunities located?

The supplied vacancies are available in Johannesburg and Cape Town.

  1. What is the Johannesburg job number?

The Johannesburg Technology Risk Graduate Programme FY2027 job number is 26000019.

  1. What is the Cape Town job number?

The Cape Town Technology Risk Graduate Programme FY2027 job number is 2600001S.

  1. Can Computer Science graduates apply?

Yes. BSc Computer Science is among the qualifications specified in the programme information.

  1. Can Information Technology graduates apply?

Yes. Information Technology qualifications are included among the specified qualifications.

  1. Can Information Systems graduates apply?

Yes. BSc Information Systems is listed.

  1. Can BCom Informatics graduates apply?

Yes. BCom Informatics is among the qualifications listed.

  1. Can Internal Audit graduates apply?

KPMG’s supplied programme information lists Internal Audit (Honours/PGDA).

Applicants should carefully note the qualification level rather than assuming that every Internal Audit qualification automatically meets the requirement.

  1. Do I need previous Technology Risk work experience?

The supplied information does not specify a previous-work-experience requirement. This is a graduate programme designed to introduce participants to the working environment.

Applicants should nevertheless check the official application listing for the complete and latest criteria.

  1. What skills does KPMG want?

The advert highlights an interest in Technology Risk, teamwork, the ability to work independently, adaptability, problem-solving and the ability to identify root causes and recommend solutions.

  1. Does the programme involve cybersecurity?

KPMG states that its Technology Risk work can include responding to cyber-attacks and supporting business resilience. The division also deals with broader IT risks, controls and emerging technologies.

  1. Does KPMG work with AI in Technology Risk?

The programme description specifically identifies AI among emerging technologies whose associated risks KPMG helps clients address.

  1. What is the closing date?

A closing date was not specified in the vacancy information supplied for this article. Applicants should check the official KPMG recruitment platform for the current application status and latest deadline information.

You can also:

 

Application Outcome Tracker (anonymous)

No names collected. This helps future applicants understand real-world timelines.

Have you applied for this opportunity?

Total responses: 0

 

Disclaimer

Edupstairs is an independent opportunities information platform and is not KPMG and does not represent KPMG.

Applicants should verify application requirements, deadlines, locations and programme availability through KPMG’s official recruitment channels before applying.

Never pay an individual claiming they can guarantee you placement in a graduate programme.

Editorial Integrity

This Edupstairs Opportunity Explainer was independently prepared using the KPMG Technology Risk Graduate Programme information supplied for the Johannesburg and Cape Town FY2027 opportunities.

Officially stated requirements have been separated from Edupstairs’ additional application and career guidance wherever appropriate.

Edupstairs does not invent qualifications, salaries, closing dates or selection guarantees when these have not been provided by the organisation.

The additional guidance in this article is intended to help applicants better understand the opportunity and prepare more effectively; it should not be interpreted as additional requirements imposed by KPMG.

EDUPSTAIRS IS A REGISTERED NON-PROFIT ORGANISATION NPO No: 232 – 182, PUBLIC BENEFIT ORGANISATION (PBO): 930066984. EDUPSTAIRS DOES NOT, IN ANY WAY OR FORM, SOLICIT MONEY OR CV’S FROM PEOPLE FOR JOBS. PLEASE BE AWARE OF PHONY JOB POSTINGS AND RECRUITMENT FRAUD. USE THE EDUPSTAIRS SCAM DETECTOR TOOL TO SPOT A SCAM BEFORE YOU APPLY

 

About the author

Sifiso Mhlongo

Sifiso Mhlongo is the Founder and Editor of Edupstairs, one of South Africa's leading online platforms for education, careers, and employment opportunities. Passionate about empowering young people, he is dedicated to making learnerships, internships, bursaries, graduate programmes, and job opportunities more accessible through clear, practical, and trustworthy content.

With a background in education and digital publishing, Sifiso leads Edupstairs' editorial strategy, ensuring every article is accurate, relevant, and designed to help South Africans make informed career decisions.
Contact: sifisomhlongo@edupstairs.org

Leave a Comment

Ask the Community