Senior Associate - Cybersecurity & Privacy

Line of Service

Industry/Sector

Specialism

Management Level

Job Description & Summary

Your Team

Are you ready to contribute to the successful delivery of Cybersecurity & Privacy engagements for clients across industries?

This is an exciting opportunity to join our Cybersecurity & Privacy team, a multidisciplinary group of consultants, engineers, and risk specialists who help clients build digital trust, manage cyber risk, and comply with evolving regulations.

You will benefit from PwC’s global network, proven methodologies, and a culture that values inclusion, continuous learning, and practical innovation.

Expect a collaborative environment where you can take ownership of workstreams, coach junior team members, and contribute to thought leadership while developing your expertise through engagements, training, and certifications.

Your Impact

• Deliver client engagements focused on cyber risk and privacy, including assessments, gap analyses, roadmaps, and implementation projects.
• Translate technical and regulatory requirements into pragmatic policies, standards, architectures, and operating procedures tailored to the client’s risk appetite.
• Design and implement security controls aligned to frameworks such as ISO/IEC 27001, NIST CSF, CIS Controls, and industry regulations (e.g., FINMA circulars, DORA, NIS2).
• Support clients in maturing capabilities across cloud security, identity and access management, data security (encryption, DLP), vulnerability and threat management, security monitoring, and incident response.
• Assess third-party and supply chain cyber risk, define remediation plans, and help establish continuous assurance and vendor oversight processes.
• Advise on privacy compliance and operations (e.g., GDPR, Swiss nFADP), including data protection impact assessments, records of processing activities, data subject rights, cross border transfers, and privacy-by-design.
• Lead workstreams, manage stakeholders, and ensure high-quality deliverables: reports, playbooks, risk registers, control matrices, and board-ready presentations.
• Contribute to business development: shape proposals, respond to RFPs, build repeatable assets, and develop points of view on emerging topics.
• Coach and mentor junior colleagues, foster a culture of teaming and excellence, and stay current with threat trends and regulatory developments.

Your Skill Set

• 2-5 years of experience in cybersecurity and/or privacy consulting or a similar role (internal or external), with proven delivery of client-facing projects.
• Strong knowledge of key frameworks and regulations: ISO/IEC 27001/2, NIST CSF, CIS Controls; awareness of NIS2, CRA, DORA, GDPR, Swiss nFADP and sector-specific guidance (e.g., FINMA) is a plus.
• Practical experience in several of the following: security governance and risk; privacy operations; identity and access management; data security; compliance with cybersecurity and resilience regulations; threat and vulnerability management; security operations and incident response; cloud security.
• Consulting core skills: structured problem-solving, clear writing, confident presentation, stakeholder management, and the ability to translate complex topics into actionable recommendations.
• Education in a relevant field (e.g., Computer Science, Information Security, Engineering, Law, Business) or equivalent practical experience.
• Professional certifications are advantageous (e.g., SSCP, Security+).
• Language skills: fluent in English; French is a strong asset.

Education (if blank, degree and/or field of study not specified)

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Available for Work Visa Sponsorship?

Government Clearance Required?

Job Posting End Date