- Level
- Senior
- Experience
- 2+ years
- Work style
- Hybrid
- Full-time
- Area
- Governance, risk & compliance
At a glance
The role in plain English
This role involves delivering cybersecurity and privacy consulting projects for clients across various industries. It suits professionals with experience in cyber risk, privacy operations, and regulatory compliance who enjoy both technical and advisory work. Day-to-day tasks include assessments, designing controls, supporting compliance, and mentoring junior staff. The position requires strong communication skills, structured problem-solving, and the ability to manage client relationships and deliverables.
What you'll do
- Deliver cyber risk and privacy client engagements
- Design and implement security controls and policies
- Advise on privacy compliance and operations
- Lead workstreams and manage stakeholders
- Coach and mentor junior colleagues
What they're looking for
Essential
- 2–5 years in cybersecurity or privacy consulting
- Knowledge of ISO/IEC 27001, NIST CSF, CIS Controls
- Experience with security governance or privacy operations
- Strong stakeholder management and communication skills
- Fluent in English
Nice to have
- Awareness of NIS2, DORA, GDPR, Swiss nFADP
- French language skills
- Professional certification (e.g., SSCP, Security+)
Core skills
- Cyber risk
- Privacy operations
- Security governance
- Compliance
- Cloud security
- Incident response
- Stakeholder management
- Report writing
Certifications mentioned
- SSCP
- Security+
The shape of the job
Technical depth
3/5
Pace
3/5
Ownership
4/5
Teamwork
4/5
Cyberend's reading of the listing, not the employer's own scores.
Application toolkit
Make your application count
See which requirements your CV meets and what is missing.
Your CV is used for this answer only and never stored.
Questions to prepare for
- 01How have you implemented ISO/IEC 27001 controls in a previous engagement?
- 02Describe a time you advised a client on GDPR or Swiss nFADP compliance.
- 03How do you translate technical requirements into business-focused recommendations?
- 04What steps would you take to assess third-party cyber risk for a client?
About PwC
PwC is a professional services firm offering advisory, assurance, and consulting services. The listing describes a multidisciplinary team focused on cybersecurity and privacy.
Full job descriptionAs published by PwC
Line of Service
Advisory
Industry/Sector
Not Applicable
Specialism
Cybersecurity & Privacy
Management Level
Associate
Job Description & Summary
Your Team
Are you ready to contribute to the successful delivery of Cybersecurity & Privacy engagements for clients across industries?
This is an exciting opportunity to join our Cybersecurity & Privacy team, a multidisciplinary group of consultants, engineers, and risk specialists who help clients build digital trust, manage cyber risk, and comply with evolving regulations.
You will benefit from PwC’s global network, proven methodologies, and a culture that values inclusion, continuous learning, and practical innovation.
Expect a collaborative environment where you can take ownership of workstreams, coach junior team members, and contribute to thought leadership while developing your expertise through engagements, training, and certifications.
Your Impact
- Deliver client engagements focused on cyber risk and privacy, including assessments, gap analyses, roadmaps, and implementation projects.
- Translate technical and regulatory requirements into pragmatic policies, standards, architectures, and operating procedures tailored to the client’s risk appetite.
- Design and implement security controls aligned to frameworks such as ISO/IEC 27001, NIST CSF, CIS Controls, and industry regulations (e.g., FINMA circulars, DORA, NIS2).
- Support clients in maturing capabilities across cloud security, identity and access management, data security (encryption, DLP), vulnerability and threat management, security monitoring, and incident response.
- Assess third-party and supply chain cyber risk, define remediation plans, and help establish continuous assurance and vendor oversight processes.
- Advise on privacy compliance and operations (e.g., GDPR, Swiss nFADP), including data protection impact assessments, records of processing activities, data subject rights, cross border transfers, and privacy-by-design.
- Lead workstreams, manage stakeholders, and ensure high-quality deliverables: reports, playbooks, risk registers, control matrices, and board-ready presentations.
- Contribute to business development: shape proposals, respond to RFPs, build repeatable assets, and develop points of view on emerging topics.
- Coach and mentor junior colleagues, foster a culture of teaming and excellence, and stay current with threat trends and regulatory developments.
Your Skill Set
- 2–5 years of experience in cybersecurity and/or privacy consulting or a similar role (internal or external), with proven delivery of client-facing projects.
- Strong knowledge of key frameworks and regulations: ISO/IEC 27001/2, NIST CSF, CIS Controls; awareness of NIS2, CRA, DORA, GDPR, Swiss nFADP and sector-specific guidance (e.g., FINMA) is a plus.
- Practical experience in several of the following: security governance and risk; privacy operations; identity and access management; data security; compliance with cybersecurity and resilience regulations; threat and vulnerability management; security operations and incident response; cloud security.
- Consulting core skills: structured problem-solving, clear writing, confident presentation, stakeholder management, and the ability to translate complex topics into actionable recommendations.
- Education in a relevant field (e.g., Computer Science, Information Security, Engineering, Law, Business) or equivalent practical experience.
- Professional certifications are advantageous (e.g., SSCP, Security+).
- Language skills: fluent in English; French is a strong asset.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Analytical Thinking, Azure Data Factory, Communication, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Encryption Technologies, Intellectual Curiosity, Learning Agility, Managed Services, Privacy Compliance, Security Architecture, Security Compliance Management, Security Control, Security Incident Management, Security Monitoring, Security Review, Self-Awareness, Teamwork, Vulnerability Assessment
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date