IN_Senior Associate_ IT Risk– Strategy, Governance, Risk & Compliance–Advisory- Pune

PwC; Pune District; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

PwC is seeking a Senior Associate to join its Cybersecurity practice in India. Implement robust cybersecurity programs, assess IT risk, and support transformation initiatives to safeguard sensitive information across client environments.

The role emphasizes collaboration with advisory teams and senior stakeholders to drive secure outcomes. The position targets candidates with extensive experience in risk management, ISO 27001, NIST, PCI, and cloud security, ready to work within PwC's advisory

Qualifications

• IT risk management and information security governance expertise.
• Knowledge of ISO 27001, NIST, PCI, and data privacy requirements.
• Cloud security and secure infrastructure design experience.

Responsibilities

• Lead IT risk assessments and security program reviews.
• Contribute to threat intelligence and vulnerability management efforts.
• Support senior stakeholders with security governance and control design.
• Provide guidance on cloud security, data protection, and secure software development.
• Communicate risk findings clearly to diverse audiences.

Skills

IT Risk

ISO 27001

NIST

PCI

Data Privacy

Cloud Security

Education

BE / B.Tech / M.Tech / MCA / MBA

Tools

CISA

CISSP

CCNP

CCSP

CISM

CRISC

Job description

Line of Service Advisory Industry/Sector Not Applicable Specialism Risk Management Level Senior Associate Job Description & Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure.

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Description & Summary

A career within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. We play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats.

Responsibilities

• Experience in conducting IT risk assessments.
• Sound understanding of ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.
• Knowledge on application infrastructure architecture.
• Knowledge on SaaS application architecture.
• Knowledge on database and middleware communication.
• Knowledge on API security.
• Good communication skills.
• Good team player.
• Good presentation skills and senior stakeholder management.
• Certifications- CISA, CISSP, CCNP, CCSP, CISM, CRISC etc.

Mandatory Skill Sets

• IT Risk
• ISO 27001
• NIST
• PCI
• Data Privacy
• Cloud Security

Preferred Skill Sets

• Stakeholder Management
• Team Management

Years of Experience Required: 7+ Years

Education Qualification: BE, B.Tech, M.Tech, MCA, MBA graduates.

Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Bachelor Degree Degrees/Field of Study preferred: Certifications (if blank, certifications not specified)

Required Skills IT Development

Optional Skills

• Accepting Feedback
• Accepting Feedback
• Active Listening
• AI Fluency
• AI-Human Collaboration
• Analytical Thinking
• Cloud Security
• Communication
• Conducting Research
• Creativity
• Cyber Defense
• Cyber Threat Intelligence
• Digital Tooling
• Embracing Change
• Emotional Regulation
• Empathy
• Encryption
• Inclusion
• Information Security
• Intellectual Curiosity
• Intelligence Analysis
• Intelligence Report
• Intrusion Detection
• Intrusion Detection System (IDS)
• IT Operations

Desired Languages (If blank, desired languages not specified)

Travel Requirements Not Specified

Available for Work Visa Sponsorship? No

Government Clearance Required? No

Are you ready to make a difference? Want to unlock new value by applying your unique perspective and talents? You can grow exponentially at PwC. Here, you can uncover hidden talents, build lifelong relationships rooted in trust and empathy and turn challenges into opportunities for innovation. We’ll help you grow your skills through challenging, meaningful work so you can go further.