Cyber Risk Associate (German Speaker)

About the role

PwC's Cyber Risk & Strategy team helps organisations understand and manage cyber risks, build governance models and comply with regulations and leading practices. As a Cyber Risk Associate, you will work at the intersection of business, technology and risk, developing cyber, risk and regulatory knowledge alongside your consulting skills. The role is open to candidates who do not start as cybersecurity or GRC specialists.

Key responsibilities

• Help clients understand how they manage technology risks by speaking with client teams and reviewing processes, policies and system documentation.
• Support audits and assessments by reviewing evidence, testing selected controls and documenting whether they are properly designed and operating effectively.
• Analyse risk and impact, including what could go wrong and whether existing measures are sufficient.
• Explain how regulations, frameworks and standards such as ISO 27001 or NIST apply to real client environments.
• Turn findings into actions by structuring observations and helping clients strengthen their control environment.
• Prepare working papers, reports and presentations, track progress and coordinate with colleagues and client stakeholders.

Required profile

• 0-4 years of professional experience; prior cybersecurity experience is helpful but not required.
• Backgrounds such as cybersecurity, technology, audit, risk, business, finance, engineering or other analytical fields are welcome.
• Strong English is important; German or Dutch skills are particularly valuable for some teams.
• An initial understanding of cybersecurity, risk management, controls or auditing is beneficial, with much of the specialist knowledge developed on the job.