Cyber GRC Associate – Advisory

About the role

PwC's Cyber Risk & Strategy team helps organisations understand and manage cyber risks, build governance models and comply with regulations and leading practices. As a Cyber GRC Associate in Cairo, you will sit at the intersection of business, technology and risk. You do not need to start as a cybersecurity or GRC specialist: the team will help you build the relevant knowledge while you develop your consulting skills through client work.

Key responsibilities

• Help clients understand how they manage technology risks by speaking with client teams and reviewing processes, policies and system documentation.
• Support audits and assessments by reviewing evidence, testing selected controls and documenting whether they are properly designed and operating effectively.
• Analyse risk and impact, including what could go wrong and whether existing measures are sufficient.
• Explain how regulations, frameworks and standards such as ISO 27001 or NIST apply to real client environments.
• Turn findings into actions by structuring observations and helping clients strengthen their control environment.
• Prepare working papers, reports and presentations, track progress and coordinate with colleagues and client stakeholders.

Required profile

• 0-4 years of professional experience; prior cybersecurity experience is helpful but not required.
• Backgrounds such as cybersecurity, technology, audit, risk, business, finance, engineering or other analytical fields are welcome.
• Strong English is important; German or Dutch skills are particularly valuable for some teams.
• An initial understanding of cybersecurity, risk management, controls or auditing is beneficial, with much of the specialist knowledge developed on the job.

Required skills

• Ability to analyse information, work carefully with documentation and communicate findings clearly.
• Relevant certifications are an advantage but not a core requirement for a Young Professional role.