Senior Associate - Supply Chain Cyber Security Specialist - Cyber Risk Advisory

PricewaterhouseCoopers Schweiz; Zürich; Vor Ort; CHF 100’000 - 130’000; Vollzeit

Zusammenfassung

A leading consulting firm in Zürich is seeking a Senior Associate for its Cybersecurity and Privacy team. The role focuses on enhancing clients' supply chain cyber risk management programs amidst evolving regulatory demands. Ideal candidates have over 5 years of relevant experience, strong communication skills, and are fluent in English, with additional languages preferred. This full-time position supports growth across various industries and involves direct interaction with clients.

Qualifikationen

• Minimum 5 years of relevant experience in cybersecurity, third-party risk, or supply chain risk management.
• Experience with regulatory-driven engagements like DORA, NIS2.
• Proven ability to perform cyber risk assessments and implement control testing.

Aufgaben

• Deliver client engagements focused on supply chain cybersecurity and third-party risk.
• Design supplier segmentation and incident response processes.
• Collaborate with clients to operationalize TPRM operating models.
• Develop recommendations and roadmaps for cyber risk governance.
• Lead workshops and engage with executive stakeholders.
• Support internal capability building and account expansion.
• Coach and mentor junior team members.

Kenntnisse

Cybersecurity proficiency

Third-party risk management

Supply chain risk management

Excellent communication skills

Stakeholder engagement

Analytical skills

Fluent in English

Fluent in German

Fluent in French

Ausbildung

Bachelor's or Master's degree in business administration or computer science

CISM, CRISC, ISO 27001 Lead Implementer, CISSP certificates

Tools

ProcessUnity

ServiceNow

BitSight

RiskRecon

Jobbeschreibung

Overview

As a Senior Associate in our Cybersecurity and Privacy team, you will play a key role in delivering and growing our supply chain cyber risk capability across all sectors of clients. You will help our clients strengthen their third‑party cyber risk management programs, comply with evolving regulatory expectations such as DORA, NIS2, and respond to emerging threats across complex, global supply chains. This is a growth‑focused role, supporting engagements across multiple financial services and non‑financial services clients, many of which are part of multi‑year transformation programs.

Your Impact

As part of the Cybersecurity and Privacy team of PwC Switzerland, you will work on:

• delivering client engagements focused on supply chain cyber security, third party risk, and compliance with DORA, NIS2, and related regulations across industries;
• designing and implementing supplier segmentation, cyber risk assessments, control testing, continuous monitoring, and incident response processes as part of broader Supplier Risk and IT GRC transformations;
• collaborating with clients to define and operationalize future state Third Party Risk Management (TPRM) operating models, including roles and responsibilities, escalation paths, and response plans;
• building AI augmented TPRM capabilities and workflows leveraging platforms such as ServiceNow, ProcessUnity, BitSight, RiskRecon, and SecurityScorecard, including tooling configuration and integrations;
• developing pragmatic recommendations and roadmaps to improve cyber risk governance, continuous monitoring, and incident/issue management across the third party lifecycle;
• leading and contributing to workshops, reporting, and executive ready presentations for CISO, CIO, Risk, Compliance, and Procurement stakeholders;
• supporting internal capability building, contributing to thought leadership, market propositions, proposal responses, and account expansion initiatives; and
• coaching and mentoring junior team members while fostering a high performance, inclusive team culture.

Your Skill Set

We are looking for a Senior Associate who embodies our core values and brings a strong background in cyber security:

• You have at minimum 5 years of relevant experience in cybersecurity, third‑party risk, or supply chain risk management.
• You have a master's or bachelor's degree or an equivalent professional qualification in business administration or computer science. Additional certificates such as CISM, CRISC, ISO 27001 Lead Implementer, CISSP are a plus.
• Proven experience working with financial services clients, ideally within regulatory‑driven engagements (e.g., DORA, NIS2).
• Strong understanding of supply chain cybersecurity frameworks, supplier risk segmentation, control testing, and cyber risk quantification.
• Familiarity with supply chain risk platforms such as ProcessUnity, ServiceNow, BitSight, RiskRecon, or equivalent.
• Excellent communication, stakeholder engagement, and client‑facing skills.
• You have strong verbal and written communication skills to interact effectively with all levels of management and staff.
• You are fluent in English and (ideally) also in German and/or French.
• You have a high degree of initiative, self‑organisation and sense of responsibility.

About PwC

At PwC Switzerland, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We're part of a tech‑forward, people‑empowered network and help clients build, accelerate and sustain momentum across audit, assurance, tax, legal, workforce, deals and consulting.