~21d ago

Cyber Governance, Risk & Compliance (GRC) – Senior Associate

Legal & ComplianceCompliance

3 views0 saves0 applied

Quick Summary

Overview

Line of ServiceAdvisory Industry/SectorNot Applicable SpecialismCybersecurity & Privacy Management LevelSenior Associate Job Description & SummaryAt PwC,

Technical Tools

Legal & ComplianceCompliance

Advisory

Not Applicable

Cybersecurity & Privacy

Senior Associate

At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We’re a tech-forward, people-empowered network with more than 370,000 people in 149 countries. Across audit and assurance, tax and legal, deals and consulting we help clients build, accelerate and sustain momentum. Find out more at www.pwc.com.

About the Role

~1 min read

Develop and enhance cybersecurity governance materials, including policies, standards, procedures, control frameworks, and RACI models.
Design and support the development of enterprise security strategies, cyber target operating models, and transformation roadmaps.
Perform readiness assessments aligned to regulatory, industry, and client-specific requirements
Execute risk management activities, including risk identification, scoring, control testing, development of KRIs/KPIs, and reporting enhancements.
Support GRC technology enablement through requirements gathering, workflow mapping, control library development, and dashboard reporting using platforms.
Facilitate workshops, interviews, and stakeholder discussions to gather insights, align requirements, and validate findings.
Work collaboratively with cross-functional project teams to ensure seamless and timely delivery of engagement outcomes.
Keep abreast of emerging regulations, cyber risks, technologies, and best practices to support continuous improvement of practice offerings.

Required Skills & Experience

3–5 years of experience in cybersecurity governance, risk management, and compliance.
Hands-on experience developing or reviewing cybersecurity policies, standards, procedures, and control frameworks.
Experience conducting cyber maturity assessments, compliance reviews, or risk assessments.
Hands-on experience with GRC tools (E.g. ServiceNow GRC, Archer, OneTrust).
Comfortable in dynamic environments with evolving client needs.
Familiarity with key frameworks and regulations including NIST CSF, ISO 27001, COBIT, MAS TRM, PDPA.
Strong analytical, problem-solving, communication, and stakeholder engagement skills.

Bachelor’s degree in Computer Science, Information Systems, Information Technology, Engineering, or related field. Equivalent experience may be considered.
Preferred Certifications: CRISC, CISM, CISSP

Strong facilitation and communication abilities.
Ability to manage multiple priorities and deliver high-quality outputs under tight timelines.
Adaptability, teamwork, and growth mindset.

Nice to Have

~1 min read

Identity Access Management (IAM), Identity Governance, Oracle Cloud Infrastructure (OCI) Identity & Access Management (IAM), Oracle Identity Manager (OIM)

Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Cloud Administration, Cloud Engineering, Cloud Infrastructure, Cloud Infrastructure Architecture Design, Cloud Resource Management, Cloud Security, Cloud Security Auditing, Cloud Service Delivery, Cloud Service Level Risk Management, Communication, Creativity, Cyber Engineering, Embracing Change, Emotional Regulation, Empathy, Forensic Investigation, Incident Investigation, Inclusion, Information Security, Infrastructure as a Service (IaaS), Intellectual Curiosity {+ 19 more}