IN_Associate-Cybersecurity_Strategy Governance Risk And Compliance_Advisory_Chennai

PwC; Chennai; On-site; INR 1,200,000 - 2,200,000; Full time

Benefits offered by this job

Mentorship

Inclusive benefits

Job summary

PwC in India is seeking a Senior Associate in its cybersecurity advisory line to design and elevate security across client cloud and on-premises environments. The role emphasizes risk assessments, policy development, and control design within ISO, NIST, and other standards.

Semiconductors/IP-driven contexts are a plus. The position requires strong analytical and communication skills, collaboration with cross-functional teams, and mentoring junior staff.

Qualifications

• Strong understanding of cybersecurity risk management, governance, and control frameworks.
• Ability to translate technical findings into business-relevant insights.
• Experience producing clear, structured documentation and executive-level reports.

Responsibilities

• Conduct cybersecurity gap assessments across client environments.
• Design, implement, and maintain information security frameworks and control programs.
• Perform risk assessments focusing on cybersecurity, business continuity, and data privacy.
• Develop cybersecurity policies and guidelines aligned with international standards.
• Lead third-party security assessments, audits, and maturity evaluations.

Skills

Cybersecurity risk

Governance

Risk assessment

Executive reporting

Stakeholder mgmt

Education

MBA

Job description

Job Description

Job Description:

Line of Service

Advisory

Industry/Sector

Not Applicable

Specialism

Risk

Management Level

Associate

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In cloud security at PwC, you will be responsible for designing, implementing and elevating the security posture across our clients’ cloud environments, covering IaaS, PaaS and SaaS. Your work will involve having a deep technical knowledge of cloud security and you will work with one or more Cloud Service Providers (CSP) to implement security protocols, monitor for potential security breaches, conduct risk assessments and vulnerability testing of cloud-based systems, and stay up to date with the latest security threats and trends in cloud technology.

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes forour clients and communities. This purpose‑led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences foreach other. Learn more about us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Summary

The Senior Associate supports the delivery of cybersecurity consulting engagements across diverse client environments. The role involves conducting cybersecurity gap and risk assessments, supporting the implementation of recognized security frameworks, and developing clear, structured policies and procedures. The Senior Associate analyzes control gaps, assesses risk exposure, and delivers practical, prioritized recommendations to improve security maturity.

The role requires strong analytical and communication skills, hands‑on execution capability, and effective collaboration with clients and internal teams. The Senior Associate contributes to engagement delivery, proposal development, and mentoring junior team members. Exposure to complex, IP-sensitve technology environments is considered a value-add. Semiconductor Industry experience will be preferred.

Responsibilities

• Conduct comprehensive cybersecurity gap assessments across client environments, evaluating governance, processes, and technical controls.
• Design, develop, implement, and maintain information security frameworks and control programs aligned with:
  • ISO/IEC 27001:2022
  • NIST Cybersecurity Framework (CSF) 2.0
  • NIST SP 800-53
  • Other applicable industry standards
• Perform risk assessments focusing on:
  • Cybersecurity and information security risks
  • Business continuity and operational resilience
  • Data protection and privacy risks
• Develop and document cybersecurity policies, standards, procedures, and guidelines aligned with international standards, contractual requirements, and organizational objectives.
• Lead independent third-party security assessments, audits, and maturity evaluations, and deliver clear, actionable, and risk-prioritized recommendations.
• Support organizations in improving cybersecurity maturity, including risk management, control design, remediation planning, and continuous improvement initiatives.
• Manage client engagements end-to-end, including:
  • RFP responses and proposal development
  • Engagement planning, execution, and delivery management
  • Stakeholder communication and reporting
  • Collaborate effectively with cross-functional internal teams and external stakeholders, including IT, engineering, legal, compliance, and business leadership.

Required Skills & Experience

• Strong understanding of cybersecurity risk management, governance, and control frameworks.
• Ability to translate technical findings into business-relevant insights.
• Experience producing clear, structured documentation and executive-level reports.
• Ability to work across diverse client environments and operating models.
• Ability to drive compliance maturity and foster strong stakeholder relationships.
• Understanding of technology-or IP-driven environments (e.g., advanced manufacturing or semiconductor) is a plus, but not mandatory.
• Awareness of cybersecurity considerations in mixed IT and engineering/OT environments, including high-availability and operational constraints.

Competencies

Accountability | Customer Centricity | Collaboration | Integrity | Perseverance | Learning Mindset | Networking | Communication Skills

Keywords for Job Portal

Cybersecurity Compliance

Governance, Risk and Compliance

IEC 62443

IoT Security

NIST CSF

NIST Gap Assessment

Mandatory Skill Sets:Automative , cybersecurity

Preferred Skill Sets:Automative, cybersecurity

Years of Experience required:4 years+

Education Qualification:MBA preferred any graduate

Education

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required: Master of Business Administration

Degrees/Field of Study preferred:

Certifications

Certifications (if blank, certifications not specified)

Required Skills

Cybersecurity

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, AI Fluency, AI-Human Collaboration, Cloud Administration, Cloud Engineering, Cloud Infrastructure, Cloud Infrastructure Architecture Design, Cloud Resource Management, Cloud Security, Cloud Security Auditing, Cloud Service Delivery, Cloud Service Level Risk Management, Communication, Cyber Engineering, Digital Tooling, Emotional Regulation, Empathy, Forensic Investigation, Incident Investigation, Inclusion, Information Security, Infrastructure as a Service (IaaS), Intellectual Curiosity {+ 17 more}

Desired Languages

Desired Languages (If blank, desired languages not specified)

Job Posting End Date

June 9, 2026