Technology and Resilience - Senior Associate

About the role

PwC's Technology and Resilience team advises firms on navigating a fast-moving regulatory landscape and building robust, future-proof technology estates. The Senior Associate supports the engagement manager and the wider team in technology risk and resilience advisory work, from DORA compliance to maturity assessments.

Key responsibilities

• Support the engagement manager and team in delivering technology risk and resilience advisory engagements.
• Perform control walkthroughs, sample testing and evidence review across technology risk and resilience domains.
• Draft gap analyses and maturity assessments aligned to COBIT, ITIL, NIST CSF and ISO 27001/22301.
• Assist with regulatory readiness and assurance projects, including DORA resilience assessments and other EU/UK regulations.
• Prepare working papers and contribute to reports for clients, regulators and internal stakeholders.
• Use platforms such as ServiceNow for resilience analysis and reporting, and leverage AI tools for risk monitoring and resilience testing.
• Contribute to cloud and DevOps risk assessments, and support business development such as tender responses and proposals.
• Build relationships with client SMEs and control owners, coach junior team members and develop your own skills.

Required profile

• Experience in technology risk, IT audit, digital resilience or related consulting.
• Working knowledge of UK/EU technology and resilience regulations (including DORA) and frameworks such as COBIT, ITIL, NIST CSF and ISO 27001/22301.
• Practical experience in control testing or assurance fieldwork (sampling, walkthroughs, KRI analysis).
• Strong communication skills, able to explain technical findings clearly to business stakeholders.
• Experience using AI in current work for risk and resilience use cases.
• Progress toward certifications such as CRISC, CISA, CISSP, CBCI, ISO 22301 Lead Auditor or Prince2/AgilePM; exposure to regulatory remediation programmes preferred.

Required skills

• Familiarity with ServiceNow for resilience analysis and automation.
• Understanding of technology risk models and resilience frameworks.