ETIC, Cyber Risk Associate

PricewaterhouseCoopers

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

Key Responsibilities

• Assess and manage cyber security risks related to IT compliance, audits, and information security.
• Implement and maintain governance, risk management, and compliance (GRC) frameworks.
• Ensure alignment with relevant standards, including ISO 27001 and NIST Cybersecurity Framework (CSF).
• Conduct risk assessments and penetration tests to identify vulnerabilities.
• Collaborate with IT and security teams to develop and enforce security policies and procedures.
• Provide training and guidance on cyber security best practices and compliance requirements.
• Prepare reports and presentations for stakeholders regarding risk management activities and compliance status.
• Stay updated on the latest trends and threats in cybersecurity.

Qualifications

• Fluent in English
• Strong knowledge of IT compliance, IT audit processes, and information security principles.
• Familiarity with governance, risk, and compliance (GRC) frameworks.
• Experience with ISO 27001 and NIST CSF standards.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey complex information clearly.

Preferred Skills

• Certifications such as CISSP, CISM, or CISA are a plus.
• Experience with security tools and technologies.
• Ability to work independently as well as part of a team.