Manager / Senior Manager - Cyber Regulatory Strategy & Transformation

PwC Switzerland; Zürich; Sur place; CHF 150 000 - 210 000; Plein temps

Résumé du poste

PwC Switzerland in Zürich is seeking a Manager / Senior Manager to lead Cyber Regulatory Strategy & Transformation. You will collaborate with cybersecurity, risk, privacy, legal and technology teams to shape practical strategies and compliant operating models for evolving regulation across NIS2, CRA, DORA, FINMA and related regimes.

The role focuses on translating complex laws into governance, mapping obligations, and delivering end-to-end programmes, including scoping, resource planning, and

Qualifications

• At least five years of experience in cybersecurity governance, risk and compliance, or related fields.
• Practical knowledge of regulatory regimes such as NIS2, Cyber Resilience Act, DORA, FINMA requirements.
• Proven ability to translate regulatory requirements into executable programmes and governance.
• Experience leading regulatory applicability assessments, readiness or gap analyses and control mapping.
• Strong understanding of governance and risk management practices and relevant standards (ISO 27001/27002, NIST, etc.).

Responsabilités

• Lead and deliver multidisciplinary engagements to assess applicability and impact of cybersecurity laws across entities and supply chains.
• Translate obligations into practical governance models, policies, controls, and roadmaps.
• Design and enhance end-to-end cybersecurity compliance programmes, including mapping, testing, remediation, and reporting.
• Perform regulatory readiness, gap analyses, and support clients through implementation and review.
• Advise on capabilities required by regulatory regimes, including incident response and regulatory reporting.
• Facilitate workshops with boards and senior stakeholders to turn complex matters into clear actions.
• Serve as trusted advisor, managing engagements end-to-end, including scope, budget and quality.
• Develop long-term client relationships and contribute to growth through thought leadership and collaboration.
• Coach team members and foster an inclusive, quality-focused work environment.

Connaissances

Cybersecurity governance

Regulatory regimes knowledge

Translate regulatory requirements

Regulatory applicability assessments

Governance and risk-management

Project management

Stakeholder communication & present.

Commercial mindset

Fluent English

German/French beneficial

Formation

Bachelor's or Master's degree in cybersecurity/information security/info systems/engineering/business or related field

Description du poste

About PwC

At PwC Switzerland, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We're part of a tech-forward, people-empowered network and help clients build, accelerate and sustain momentum across audit, assurance, tax, legal, workforce, deals and consulting.

About PwC

At PwC Switzerland, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We're part of a tech-forward, people-empowered network and help clients build, accelerate and sustain momentum across audit, assurance, tax, legal, workforce, deals and consulting.

Manager / Senior Manager - Cyber Regulatory Strategy & Transformation

Join our Cybersecurity & Privacy team and work with cybersecurity, risk, privacy, legal and technology specialists to help organisations translate evolving cybersecurity regulation into practical strategies, resilient operating models and sustainable compliance programmes.

This is an opportunity to shape and grow our cybersecurity regulation and compliance offering. You will our clients across industries, from assessing applicability and readiness to designing and implementing compliance programmes for requirements such as NIS2 and its national implementations, the Cyber Resilience Act (CRA), DORA, and relevant Swiss and international sector-specific requirements.

Your Impact

• Lead and deliver multidisciplinary engagements that help clients determine the applicability and impact of cybersecurity laws and regulations across legal entities, jurisdictions, business services, products and supply chains.
• Translate legal and regulatory obligations into practical governance models, policies, control frameworks, target operating models and risk-based implementation roadmaps.
• Design, establish and enhance end-to-end cybersecurity compliance programmes, including regulatory inventories, obligation and control mapping, ownership models, evidence management, control testing, issue and remediation management, metrics, reporting and regulatory change monitoring.
• Perform regulatory readiness, gap and maturity assessments, define proportionate remediation measures, and support clients through implementation, testing and independent review.
• Advise clients on the capabilities required by applicable regulatory regimes, including cybersecurity risk management, incident response and regulatory reporting, third-party and supply-chain security, vulnerability management, secure product development, business continuity and executive oversight.
• Facilitate workshops and briefings with boards, executive management and stakeholders across Legal, Compliance, Risk, IT, Security, Product and Engineering, turning complex regulatory and technical matters into clear decisions and actions.
• Serve as a trusted advisor and key client contact, managing engagements end to end, including scope, delivery teams, budget, quality and stakeholder expectations.
• Develop long-term client relationships and contribute to the growth of our practice through new offerings, thought leadership, industry events and collaboration across the PwC network.
• Coach and develop team members and contribute to a collaborative, inclusive and quality-driven working environment.

Your Skill Set

• You have at least five years of relevant experience in cybersecurity governance, risk and compliance, technology or digital regulation, information security, digital resilience, or a related field. Experience gained in consulting, a Big Four firm, a regulated organisation, or a technology or product company is particularly relevant.
• You have practical knowledge of one or more cybersecurity regulatory regimes, such as NIS2 and its national implementations, the Cyber Resilience Act, DORA, FINMA requirements, or comparable Swiss and international sector-specific requirements.
• You have proven experience translating regulatory requirements into executable compliance programmes, governance arrangements, controls and operational processes.
• You have led or contributed to regulatory applicability assessments, readiness or gap assessments, control mapping, remediation programmes, regulatory change initiatives or compliance assurance engagements.
• You understand cybersecurity governance and risk-management practices and are familiar with relevant standards and frameworks, such as ISO/IEC 27001 and 27002, the NIST Cybersecurity Framework, CIS Controls and, where relevant, IEC 62443 or secure software and product-development practices.
• You hold a bachelor's or master's degree in cybersecurity, information security, information systems, engineering, business or a related field, or have an equivalent professional qualification.
• Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor, or a relevant project-management qualification are an advantage.
• You demonstrate strong project-management, analytical, communication and presentation skills, with the ability to engage senior stakeholders and bridge legal, business and technical perspectives.
• You have a commercial mindset and experience contributing to proposals, market development and long-term client relationships.
• You are fluent in English. German and/or French are a strong advantage.