Manager / Senior Manager - Cyber Regulatory Strategy & Transformation

PwC Switzerland; Zürich; Vor Ort; CHF 140.000 - 190.000; Vollzeit

Zusammenfassung

PwC Switzerland is seeking a Manager / Senior Manager in Cyber Regulatory Strategy & Transformation to help translate evolving cybersecurity regulation into practical strategies and compliant operating models. You will shape and grow our offering from assessment to implementation across sectors, including NIS2, CRA, DORA and FINMA-related requirements.

You will lead multidisciplinary engagements, map obligations to governance and controls, and guide clients through readiness, remediation and

Qualifikationen

• Five+ years of cybersecurity governance, risk and compliance experience.
• Practical knowledge of regimes such as NIS2, CRA, DORA, FINMA or similar.
• Experience translating regulatory requirements into executable programmes.
• Experience leading regulatory applicability or readiness assessments.

Aufgaben

• Lead multidisciplinary engagements to assess applicability and impact of cybersecurity laws.
• Translate regulatory obligations into governance models, controls, and roadmaps.
• Design and enhance end-to-end cybersecurity compliance programmes.
• Advise clients on capabilities required by regulatory regimes, including incident response and reporting.
• Run workshops with boards and senior stakeholders; manage engagements end-to-end.
• Develop long-term client relationships and contribute to market growth.
• Coach team members and foster a collaborative, quality-driven environment.

Kenntnisse

Cybersecurity governance

Regulatory compliance

Regulatory regimes knowledge

Stakeholder management

Project management

Analytical skills

Communication skills

English fluency

Ausbildung

Bachelor's or Master's in cybersecurity / information security

Jobbeschreibung

About PwC

At PwC Switzerland, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We're part of a tech-forward, people-empowered network and help clients build, accelerate and sustain momentum across audit, assurance, tax, legal, workforce, deals and consulting.

About PwC

At PwC Switzerland, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We're part of a tech-forward, people-empowered network and help clients build, accelerate and sustain momentum across audit, assurance, tax, legal, workforce, deals and consulting.

Manager / Senior Manager - Cyber Regulatory Strategy & Transformation

Join our Cybersecurity & Privacy team and work with cybersecurity, risk, privacy, legal and technology specialists to help organisations translate evolving cybersecurity regulation into practical strategies, resilient operating models and sustainable compliance programmes.

This is an opportunity to shape and grow our cybersecurity regulation and compliance offering. You will our clients across industries, from assessing applicability and readiness to designing and implementing compliance programmes for requirements such as NIS2 and its national implementations, the Cyber Resilience Act (CRA), DORA, and relevant Swiss and international sector-specific requirements.

Your Impact

• Lead and deliver multidisciplinary engagements that help clients determine the applicability and impact of cybersecurity laws and regulations across legal entities, jurisdictions, business services, products and supply chains.
• Translate legal and regulatory obligations into practical governance models, policies, control frameworks, target operating models and risk-based implementation roadmaps.
• Design, establish and enhance end-to-end cybersecurity compliance programmes, including regulatory inventories, obligation and control mapping, ownership models, evidence management, control testing, issue and remediation management, metrics, reporting and regulatory change monitoring.
• Perform regulatory readiness, gap and maturity assessments, define proportionate remediation measures, and support clients through implementation, testing and independent review.
• Advise clients on the capabilities required by applicable regulatory regimes, including cybersecurity risk management, incident response and regulatory reporting, third‑party and supply‑chain security, vulnerability management, secure product development, business continuity and executive oversight.
• Facilitate workshops and briefings with boards, executive management and stakeholders across Legal, Compliance, Risk, IT, Security, Product and Engineering, turning complex regulatory and technical matters into clear decisions and actions.
• Serve as a trusted advisor and key client contact, managing engagements end to end, including scope, delivery teams, budget, quality and stakeholder expectations.
• Develop long‑term client relationships and contribute to the growth of our practice through new offerings, thought leadership, industry events and collaboration across the PwC network.
• Coach and develop team members and contribute to a collaborative, inclusive and quality‑driven working environment.

Your Skill Set

• You have at least five years of relevant experience in cybersecurity governance, risk and compliance, technology or digital regulation, information security, digital resilience, or a related field. Experience gained in consulting, a Big Four firm, a regulated organisation, or a technology or product company is particularly relevant.
• You have practical knowledge of one or more cybersecurity regulatory regimes, such as NIS2 and its national implementations, the Cyber Resilience Act, DORA, FINMA requirements, or comparable Swiss and international sector‑specific requirements.
• You have proven experience translating regulatory requirements into executable compliance programmes, governance arrangements, controls and operational processes.
• You have led or contributed to regulatory applicability assessments, readiness or gap assessments, control mapping, remediation programmes, regulatory change initiatives or compliance assurance engagements.
• You understand cybersecurity governance and risk‑management practices and are familiar with relevant standards and frameworks, such as ISO/IEC 27001 and 27002, the NIST Cybersecurity Framework, CIS Controls and, where relevant, IEC 62443 or secure software and product‑development practices.
• You hold a bachelor's or master's degree in cybersecurity, information security, information systems, engineering, business or a related field, or have an equivalent professional qualification.
• Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor, or a relevant project‑management qualification are an advantage.
• You demonstrate strong project‑management, analytical, communication and presentation skills, with the ability to engage senior stakeholders and bridge legal, business and technical perspectives.
• You have a commercial mindset and experience contributing to proposals, market development and long‑term client relationships.
• You are fluent in English. German and/or French are a strong advantage.

Your Contact

Any questions? We are happy to help.

Patricia Santos

Recruitment Team

[phone]