Cyber GRC Senior Associate

About the role

PwC's Cyber Risk & Strategy team helps organizations understand and manage the risks of using technology and digital services, answering questions such as whether key systems are sufficiently protected, which controls are in place, where the biggest risks lie and whether regulatory and industry expectations are met. As a Senior Associate, you will work at the intersection of business, technology and risk, taking ownership of key parts of client engagements, working directly with client teams and helping junior colleagues deliver high-quality work.

Key responsibilities

• Own parts of client projects, from planning and information gathering through analysis, documentation and final recommendations.
• Review clients' processes, policies and controls, speak with stakeholders and identify risks and improvement opportunities.
• Help clients understand what regulations and industry standards mean for their organization and where changes are needed.
• Structure findings, explain their business impact and develop practical actions clients can implement.
• Facilitate interviews and workshops, discuss findings and support client teams in resolving questions.
• Review the work of junior colleagues, give guidance and help them build their consulting and cyber risk capabilities.

Required profile

• Typically 3-6 years of relevant experience, for example in cyber or technology risk, GRC, IT audit, technology consulting, risk management or related fields.
• Able to take ownership of work, engage directly with clients and manage several activities within a project.
• Experience assessing risks, processes or controls and turning findings into practical recommendations; experience guiding juniors is beneficial.
• Strong English is required; German or Dutch is a plus.

Required skills

• Knowledge of ISO 27001, NIST, IT audit, regulatory compliance or third-party risk is beneficial.
• Certifications such as CISA, CISM, CRISC or ISO 27001 are an advantage but should support rather than define the profile.