IT Risk Specialist

PriceWaterhouseCoopers Pvt Ltd ( PWC ); Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

PwC Bangalore is seeking an IT Risk Specialist 3 within Advisory to help identify risks and govern security controls. You will contribute to risk assessments, threat analysis, and implementation of privacy and cloud security measures as part of a broader cybersecurity program.

The role emphasizes strong communication, stakeholder management, and collaboration with cross-functional teams to protect digital assets and enable secure transformation for clients.

Qualifications

• Experience in IT risk assessments.
• Knowledge of ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.
• Knowledge of application infrastructure architecture.
• Knowledge of SaaS application architecture.
• Knowledge of database and middleware communication.
• Knowledge of API security.
• Good communication skills.
• Good team player.
• Good presentation skills and senior stakeholder management.

Responsibilities

• Conduct IT risk assessments and develop risk treatment plans.
• Assist in establishing and maturing cybersecurity programs and controls.
• Help deliver transformation strategies focused on security in a digital environment.
• Identify vulnerabilities, threats, and protection measures for resilient IT systems.

Skills

IT Risk

ISO 27001

NIST

PCI

Data Privacy

Cloud Security

Communication

Team player

Presentation

Stakeholder management

Education

BE,B.Tech,M.Tech,MCA,MBA

Job description

IN-Specialist 3- IT Risk- GCC - Advisory- Bangalore Line of Service Advisory Industry/Sector Not Applicable Specialism Operations Management Level Specialist Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure.

Why PWC

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us .

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm's growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

"Job Description & Summary"

A career within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. We play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats.

• Experience in conducting IT risk assessments.
• Sound understanding of ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.
• Knowledge on application infrastructure architecture.
• Knowledge on SaaS application architecture.
• Knowledge on database and middleware communication.
• Knowledge on API security.
• Good communication skills.
• Good team player.
• Good presentation skills and senior stakeholder management.

Certifications - CISA, CISSP, CCNP, CCSP, CISM, CRISC etc.

Mandatory Skill Sets: IT Risk , ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.

Preferred Skill Sets: Stakeholder Management , Team Management

Years of Experience required: 1 + Years Education Qualification: BE, B.Tech , M.Tech , MCA, MBA graduates .

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required: Master of Business AdministrationDegrees/Field of Study preferred: Certifications (if blank, certifications not specified)

Required Skills Information Technology (IT) Optional Skills Accepting Feedback, Accepting Feedback, Active Listening, Cloud Security, Communication, Conducting Research, Cyber Defense, Cyber Threat Intelligence, Emotional Regulation, Empathy, Encryption, Inclusion, Information Security, Intellectual Curiosity, Intelligence Analysis, Intelligence Report, Intrusion Detection, Intrusion Detection System (IDS), IT Operations, Malware Analysis, Malware Detection Tools, Malware Intelligence Gathering, Malware Research, Malware Reverse Engineering, Malware Sandboxing {+ 11 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements Available for Work Visa Sponsorship? Government Clearance Required?

Job Posting End Date August 14, 2026