Associate - Cybersecurity & Privacy

PwC; Genf; Hybrid; CHF 120,000 - 180,000; Full time

Job summary

PwC в Женеве ищет консультанта по кибербезопасности и приватности с опытом реализации client-facing проектов. Вы будете работать над оценками, дорожными картами, внедрением и соблюдением регуляторных требований.

Кандидат должен иметь 2–5 лет опыта в области кибербезопасности и/или приватности, знание ISO/IEC 27001/NIST CSF/CIS Controls, GDPR/nFADP, FINMA. Ориентация на качество, коучинг коллег и развитие практик PwC.

Qualifications

• Актуален опыт 2–5 лет в кибербезопасности и/или приватности, участие в проектах для клиентов.
• Среднее и выше владение английским языком; французский — сильный плюс.

Responsibilities

• Резолвинг задачи клиентов по кибербезопасности и приватности, включая анализы, дорожные карты и проекты внедрения.
• Перевод технических и регуляторных требований в политики, стандарты и архитектуры, соответствующие риску клиента.
• Руководство потоками работ, управление заинтересованными сторонами, подготовка материалов для управления и регуляторной отчетности.
• Участие в развитии бизнеса: подготовка предложений, ответы на RFP, подготовка повторяемых материалов.

Skills

Analytical Thinking

Communication

Cybersecurity

Cybersecurity Framework

Privacy Compliance

Security Architecture

Security Incident Management

Security Monitoring

Vulnerability Assessment

Teamwork

Self-Awareness

Learning Agility

Intellectual Curiosity

Education

Степень в области компьютерных наук/информационной безопасности/инженерии/юриспруденции/бизнеса

Профессиональные сертификации приветствуются

Tools

Azure Data Factory

Job description

Описание

Line of Service Advisory Industry/Sector Not Applicable Specialism

Задачи

Deliver client engagements focused on cyber risk and privacy, including assessments, gap analyses, roadmaps, and implementation projects. Translate technical and regulatory requirements into pragmatic policies, standards, architectures, and operating procedures tailored to the client’s risk appetite. Design and implement security controls aligned to frameworks such as ISO/IEC 27001, NIST CSF, CIS Controls, and industry regulations (e.g., FINMA circulars, DORA, NIS2). Support clients in maturing capabilities across cloud security, identity and access management, data security (encryption, DLP), vulnerability and threat management, security monitoring, and incident response. Assess third-party and supply chain cyber risk, define remediation plans, and help establish continuous assurance and vendor oversight processes. Advise on privacy compliance and operations (e.g., GDPR, Swiss nFADP), including data protection impact assessments, records of processing activities, data subject rights, cross border transfers, and privacy-by-design. Lead workstreams, manage stakeholders, and ensure high-quality deliverables: reports, playbooks, risk registers, control matrices, and board‑ready presentations. Contribute to business development: shape proposals, respond to RFPs, build repeatable assets, and develop points of view on emerging topics. Coach and mentor junior colleagues, foster a culture of teaming and excellence, and stay current with threat trends and regulatory developments. Your Skill Set 2–5 years of experience in cybersecurity and/or privacy consulting or a similar role (internal or external), with proven delivery of client‑facing projects. Strong knowledge of key frameworks and regulations: ISO/IEC 27001/2, NIST CSF, CIS Controls; awareness of NIS2, CRA, DORA, GDPR, Swiss nFADP and sector‑specific guidance (e.g., FINMA) is a plus. Practical experience in several of the following: security governance and risk; privacy operations; identity and access management; data security; compliance with cybersecurity and resilience regulations; threat and vulnerability management; security operations and incident response; cloud security. Consulting core skills: structured problem‑solving, clear writing, confident presentation, stakeholder management, and the ability to translate complex topics into actionable recommendations. Education in a relevant field (e.g., Computer Science, Information Security, Engineering, Law, Business) or equivalent practical experience. Professional certifications are advantageous (e.g., SSCP, Security+). Language skills: fluent in English; French is a strong asset. Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Degrees/Field of Study preferred: Certifications (if blank, certifications not specified)

Требования

• Analytical Thinking
• Azure Data Factory
• Communication
• Cybersecurity
• Cybersecurity Framework
• Cybersecurity Policy
• Cybersecurity Requirements
• Cybersecurity Strategy
• Encryption Technologies
• Intellectual Curiosity
• Learning Agility
• Managed Services
• Privacy Compliance
• Security Architecture
• Security Compliance Management
• Security Control
• Security Incident Management
• Security Monitoring
• Security Review
• Self-Awareness
• Teamwork
• Vulnerability Assessment

Desired Languages (If blank, desired languages not specified)

Available for Work Visa Sponsorship?

Government Clearance Required?

Job Posting End Date

Условия

Are you ready to contribute to the successful delivery of Cybersecurity & Privacy engagements for clients across industries? This is an exciting opportunity to join our Cybersecurity & Privacy team, a multidisciplinary group of consultants, engineers, and risk specialists who help clients build digital trust, manage cyber risk, and comply with evolving regulations. You will benefit from PwC’s global network, proven methodologies, and a culture that values inclusion, continuous learning, and practical innovation. Expect a collaborative environment where you can take ownership of workstreams, coach junior team members, and contribute to thought leadership while developing your expertise through engagements, training, and certifications.