Senior Associate - Cybersecurity (SOC & SIEM)

PriceWaterhouseCoopers Pvt Ltd ( PWC ); Mumbai City; On-site; INR 900,000 - 1,500,000; Full time

Job summary

PwC in Mumbai is seeking a Senior Associate for SOC - SIEM/ITRA Advisory to drive governance, risk and compliance activities across information security domains. You will contribute to risk assessments, policy development and audit support within a dynamic advisory setting.

The role requires 4–6 years of experience in GRC, with a strong focus on IS principles, controls, and framework-based risk management. Collaborative work with cross-functional teams is essential for success.

Qualifications

• Minimum 2+ years in Governance, Risk and Compliance roles.
• Good understanding of IS principles, controls and risk management methodologies, compliance, and audit.
• Experience sharing commercials with procurement teams.

Responsibilities

• Conduct internal assessments and risk assessments of IT/OT processes and improve IT governance maturity using ISO 27001/NIST/TISAX references.
• Ensure compliance with information security policies and procedures; perform regular checks and KRIs on security tools; monitor nonconformities.
• Conduct risk assessments to identify, evaluate and prioritize information security and business risks.
• Support external audits by preparing documentation, coordinating activities and ensuring compliance with cybersecurity policies.
• Work with IT, legal and business stakeholders to integrate IS risk management into processes aligned with goals.
• Contribute to development of IS policies, procedures and guidelines and assist in security awareness training.
• Maintain documentation of risk assessments, compliance activities, audits, and incident reports for leadership and regulators.

Skills

Strong analytical and problem-solving

Excellent communication and Inter个人

Ability to influence and collaborate

GRC tools and software

Education

B.E./B.Tech / M.Tech / MCA / BCA / MBA

Job description

IN_Senior Associate_SOC - SIEM_ITRA_Advisory_Mumbai Line of Service Advisory Industry/Sector Not Applicable Specialism Risk Management Level Senior Associate

Job Description & Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

Why PWC At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us .

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

Job Description

M inimum 2 + years of hands‑on experience in Governance, Risk and Compliance roles. Good understanding of IS principles, controls and risk management methodologies, compliance, and audit. Request if you can on priority also share the commercials so that we can run it through Shivani and the procurement teams.

Responsibilities

• Conduct internal assessment, risk assessments and review of IT , OT processes and recommend action for improving IT governance maturity using reference frameworks like ISO 27001/NIST framework/TISAX.
• Ensure compliance with organizational information Security policies and procedures Perform regular checks and KRI on security tool . Responsible to monitor and manage security related nonconformities.
• Conduct risk assessments to identify , evaluate and prioritize risks related to information security and business operations.
• Support external audits by preparing documentation, coordinating audit activities, and ensuring compliance with cybersecurity policies and standards.
• Work closely with IT, legal and other business stakeholders to integrate IS risk management into business processes ensuring alignment with organizational goals.
• Contribute to the development of IS policies, procedures and guidelines and assist in delivering training programs to raise awareness of security best practices across the organization.
• Maintain clear and comprehensive documentation of risk assessments , compliance activities , audits, and incident reports to provide transparency to senior leadership and regulatory bodies.

Mandatory Skill sets

• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills
• Ability to influence and work collaboratively across departments
• Proficiency in GRC tools and softwar e

Preferred skill sets

• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills
• Ability to influence and work collaboratively across departments
• Proficiency in GRC tools and softwar e

Years of experience required: 4-6 yr

Education qualification: Minimum Qualifications - B.E. or B. TECH, M. TECH, MCA, BCA, MBA Graduate Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Bachelor DegreeDegrees/Field of Study preferred: Certifications (if blank, certifications not specified)

Required Skills SoC Design Optional Skills Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {+ 8 more}

Travel Requirements Available for Work Visa Sponsorship? Government Clearance Required?

Job Posting End Date June 18, 2026 Experience Level Senior Level