IN_Senior Associate_ IT Risk - Strategy, Governance, Risk & Compliance - Advisory- Pune

PwC; Pune District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

PwC is seeking a senior cybersecurity professional in Pune to strengthen threat intelligence and vulnerability management programs. You will assess risks, design secure architectures, and help clients protect critical data while advancing organizational resilience.

Responsibilities include leading IT risk assessments, aligning with ISO 27001, NIST, PCI, and privacy requirements, and collaborating with teams to implement secure cloud solutions and robust security controls.

Qualifications

• Experience in IT risk assessments and information security controls.
• Strong knowledge of ISO 27001, NIST, PCI, Data Privacy and Cloud Security.
• Understanding of SaaS and data protection across architectures.

Responsibilities

• Lead IT risk assessments and security controls implementation.
• Evaluate and improve security across ISO 27001, NIST, PCI frameworks.
• Assist in cloud security design and data privacy compliance.
• Collaborate with stakeholders and communicate risk findings clearly.
• Support threat intelligence and vulnerability management initiatives.

Skills

IT Risk

ISO 27001

NIST

PCI

Data Privacy

Cloud Security

Education

BE/B.Tech

M.Tech

MCA

MBA

Job description

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure.

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm's growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Description & Summary

A career within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. We play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats.

Responsibilities

• Experience in conducting IT risk assessments.


• Sound understanding of ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.


• Knowledge on application infrastructure architecture.


• Knowledge on SaaS application architecture.


• Knowledge on database and middleware communication.


• Knowledge on API security.


• Good communication skills.


• Good team player.


• Good presentation skills and senior stakeholder management.


• Certifications - CISA, CISSP, CCNP, CCSP, CISM, CRISC etc.

Mandatory Skill Sets

• IT Risk , ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.

Preferred Skill Sets

• Stakeholder Management , Team Management

Years of Experience Required

7 + Years

Education Qualification

BE, B.Tech, M.Tech, MCA, MBA graduates.

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required: Bachelor Degree

Required Skills

• IT Development

Optional Skills

• Accepting Feedback, Accepting Feedback, Active Listening, AI Fluency, AI-Human Collaboration, Analytical Thinking, Cloud Security, Communication, Conducting Research, Creativity, Cyber Defense, Cyber Threat Intelligence, Digital Tooling, Embracing Change, Emotional Regulation, Empathy, Encryption, Inclusion, Information Security, Intellectual Curiosity, Intelligence Analysis, Intelligence Report, Intrusion Detection, Intrusion Detection System (IDS), IT Operations {+ 19 more}

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No

Job Posting End Date

August 18, 2026