Cyber GRC Graduate Program (German Speaker)

About the role

PwC's Cyber Risk & Strategy team helps organizations understand and manage cyber risks, build governance models and comply with regulations and leading practices. This graduate program sits at the intersection of business, technology and risk, and does not require starting as a cybersecurity or GRC specialist: the firm builds the relevant knowledge while you develop consulting skills through client work.

Key responsibilities

• Help clients understand how they manage technology risks by speaking with client teams and reviewing processes, policies and system documentation.
• Support audits and assessments by reviewing evidence, testing selected controls and documenting whether they are properly designed and operating effectively.
• Analyze risk and impact, including what could go wrong and whether existing measures are sufficient.
• Explain how regulations, frameworks and standards such as ISO 27001 or NIST apply to real client environments.
• Structure observations and help clients develop actions to strengthen their control environment.
• Prepare working papers, reports and presentations, track progress and coordinate with colleagues and client stakeholders.

Required profile

• 0-4 years of professional experience; prior cybersecurity experience is helpful but not required.
• Backgrounds such as cybersecurity, technology, audit, risk, business, finance, engineering or other analytical fields are welcome.
• Strong English is important; German or Dutch skills are particularly valuable for some teams.
• An initial understanding of cybersecurity, risk management, controls or auditing is beneficial, with much of the specialist knowledge developed on the job.