IN_Associate_BCM_ITRA_Advisory_Bangalore

PwC; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

PwC in Bengaluru is seeking an Associate to lead threat intelligence and vulnerability management initiatives, focusing on implementing and sustaining the ISO 22301 Business Continuity Management framework. You will identify vulnerabilities, design secure systems, and help safeguard critical data in a dynamic, risk-aware environment.

This role involves coordinating BC/DR planning and testing, supporting audits, and guiding stakeholders on policy development aligned with ISO 22301 and NIST.

Qualifications

• Experience implementing ISO 22301 certification programmes.
• Strong knowledge of Business Continuity and Disaster Recovery planning.
• Familiarity with risk management frameworks such as NIST.

Responsibilities

• Experience in implementing and assessing ISO 22301 certification programmes.
• Develop and maintain Business Continuity, Disaster Recovery, and Crisis/Incident plans.
• Coordinate testing, exercises, and post-test lessons learned.
• Support BC/DR audits and align policies with standards (ISO 22301, NIST).
• Collaborate with stakeholders to map risk to business resiliency programs.
• Lead and mentor team members on BC & DR processes and practices.

Skills

ISO 22301

BCP

Disaster Recovery

Crisis/Incident Management

NIST

Risk Management

Stakeholder Communication

Education

Bachelor's degree

Job description

Line of Service

Advisory

Industry/Sector

Not Applicable

Specialism

Risk

Management Level

Associate

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure.

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us .

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm's growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Description & Summary

Implementation and assessment of the Business Continuity Management and Disaster Recovery Management framework, ISO 22301 implementation and Certification

Responsibilities

• Experience in managing implementation of ISO 22301 certification programmes
• Extensive experience of the BCP framework components such as Business Resiliency Planning, Crisis Management Planning, Incident Response Planning, Disaster Recovery Planning, Plan Exercising/ Testing, BIAs etc.
• Strong understanding of the planning, development, program execution, maintenance and testing of Enterprise Business Continuity, Disaster Recovery, and Crisis/Incident Management programs
• Hands on experience in implementing and assessing business resiliency program for organization of various sizes and complexity.
• Should be able to support BC/ DR audit and examination activities including development and maintenance of policies, procedures and standards that are aligned with best practices (standards, frameworks) such as ISO 22301, NIST
• Should be able to understand the Enterprise Risk Management methodologies and map it to the Business Resiliency Program
• Support the identification of Business Continuity related risks (internal / external), the assessment of their likelihood, as well as potential impacts and risk mitigation plans.
• Conduct Business Impact Assessment for various business functions
• Support internal reporting and tracking of business continuity related issues and remediation activities.
• Design, coordinate and execute BCP/DR annual test exercises for critical business processes and produce test reports including lessons learned.
• Develop recovery priorities, timelines, and strategy for proper sequence of recovery components
• Assist Crisis Management / Incident Management teams during service disruption events and contribute to process improvement initiatives.
• Should understand complete assessment lifecycle from assessment scoping to project deliverables
• Collaboration with the different stakeholders on the complex assessment issues to develop possible recommendations
• Monitor progress, manage risk, and verify key stakeholders are kept informed about progress and expected outcomes
• Presents findings and proposes recommendations that deal with root cause of issues and impact to the organization
• Manages the approved budget and resources for the assigned audit; assigns and reviews the work done by all team members
• Coaches team members and colleagues in the best use of company & teams methodologies and tools
• Educate team members in the correct implementation of BC & DR processes, standards and impart training to ensure recoverability of business processes and supporting services across business functions.
• Demonstrates excellent people management capabilities and is able to think out of the box
• Great communication skills and the ability to break down and explain complex data security problems
• Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels

Education

Minimum Qualification: B