Cyber GRC Graduate Program

About the role

PwC's Cyber Risk & Strategy team helps organisations understand and manage cyber risks, build governance models and comply with regulations and leading practices. This graduate program sits at the intersection of business, technology and risk, and does not require starting as a Cybersecurity or GRC specialist: the team builds the relevant knowledge while you develop consulting skills through client work.

Key responsibilities

• Help clients understand how they manage technology risks by speaking with client teams and reviewing processes, policies and system documentation.
• Support audits and assessments by reviewing evidence, testing selected controls and documenting whether they are properly designed and operating effectively.
• Analyse risk and impact, including what could go wrong and whether existing measures are sufficient.
• Explain how regulations, frameworks and standards such as ISO 27001 or NIST apply to real client environments.
• Turn findings into actions and prepare working papers, reports and presentations, tracking progress and coordinating with colleagues and client stakeholders.

Required profile

• 0-4 years of professional experience; prior cybersecurity experience is helpful but not required.
• Backgrounds such as cybersecurity, technology, audit, risk, business, finance, engineering or other analytical fields are welcome.
• Strong English is important; German or Dutch skills are particularly valuable for some teams.
• An initial understanding of cybersecurity, risk management, controls or auditing is beneficial, and relevant certifications can be an advantage.