Cyber Risk Associate

About the role

PwC's cybersecurity practice protects organisations from cyber threats through advanced technologies and strategies, identifying vulnerabilities and developing secure systems. As a cybersecurity generalist (Cyber Risk Associate) in the Advisory line of service, you will provide comprehensive security solutions across domains, keeping client systems and data protected by applying a broad understanding of cybersecurity principles.

Key responsibilities

• Assess and manage cyber security risks related to IT compliance, audits and information security
• Implement and maintain governance, risk management and compliance (GRC) frameworks
• Ensure alignment with ISO 27001 and the NIST Cybersecurity Framework (CSF)
• Conduct risk assessments and penetration tests to identify vulnerabilities
• Work with IT and security teams to develop and enforce security policies and procedures
• Provide training and guidance on cyber security best practices and compliance requirements
• Prepare reports and presentations for stakeholders on risk management and compliance status
• Stay up to date on cybersecurity trends and threats

Required profile

• Fluent in English
• Strong knowledge of IT compliance, IT audit processes and information security principles
• Familiarity with GRC frameworks, and experience with ISO 27001 and NIST CSF
• Excellent analytical and problem-solving skills
• Strong communication and interpersonal skills
• Preferred: certifications such as CISSP, CISM or CISA; experience with security tools and technologies; ability to work independently and in a team