Cyber GRC Senior Associate (German Speaker)

About the role

PwC's Cyber Risk & Strategy team helps organizations understand and manage the risks of using technology and digital services, answering questions such as whether key systems are sufficiently protected, which controls are in place and where regulatory and industry expectations are met. As a Senior Associate in the Advisory line of service, you will work at the intersection of business, technology and risk, taking ownership of key parts of client engagements, working directly with client teams and helping junior colleagues deliver high-quality work.

Key responsibilities

• Take responsibility for defined workstreams, from planning and information gathering through analysis, documentation and final recommendations.
• Review clients' processes, policies and controls, speak with stakeholders and identify risks and improvement opportunities.
• Help clients understand what regulations and industry standards mean for their organization and where changes are needed.
• Structure findings, explain their business impact and develop practical actions clients can implement.
• Facilitate interviews and workshops, discuss findings and support client teams in resolving questions during the engagement.
• Review the work of junior colleagues, give guidance and help them build their consulting and cyber risk capabilities.

Required profile

• Typically 3-6 years of relevant experience in cyber or technology risk, GRC, IT audit, technology consulting, risk management or related fields.
• Ability to take ownership of work, engage directly with clients and manage several activities within a project.
• Experience assessing risks, processes or controls and turning findings into practical recommendations; experience guiding juniors is beneficial.
• Strong English is required; German or Dutch is a plus.
• Knowledge of ISO 27001, NIST, IT audit, regulatory compliance or third-party risk is beneficial; certifications such as CISA, CISM, CRISC or ISO27001 are an advantage.