Senior Manager - IT Risk Assessment and Cybersecurity

PriceWaterhouseCoopers Pvt Ltd ( PWC ); Bengaluru; On-site; INR 6,000,000 - 9,000,000; Full time

Job summary

PwC Bangalore is seeking a Senior Manager to lead IT risk assessments and governance initiatives within Advisory. The role focuses on threat assessment, risk frameworks, and safeguarding critical data across cloud and on-premise environments.

You will guide senior stakeholders and mentor junior staff while delivering actionable risk insights. Join PwC's cybersecurity practice to help clients transform security postures, drive compliance with ISO 27001, NIST, and PCI, and contribute to strategic

Qualifications

• Extensive experience in IT Risk, ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.
• Strong leadership and stakeholder management skills.
• Excellent communication and presentation abilities.

Responsibilities

• Lead and conduct comprehensive IT risk assessments and audits.
• Develop and implement IT risk management frameworks and strategies.
• Provide expert guidance on ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.
• Oversee the evaluation of application infrastructure architecture and SaaS application architecture.
• Ensure robust database and middleware communication security.
• Implement and manage API security protocols.
• Deliver high-quality presentations and reports to senior stakeholders.
• Mentor and guide junior team members in IT risk assessment methodologies.
• Collaborate with cross-functional teams to enhance cybersecurity measures.

Skills

IT Risk

ISO 27001

NIST

PCI

Data Privacy

Cloud Security

Leadership

Stakeholder Management

Communication

Presentation

Education

BE/BTech/MTech/MCA/MBA

Certifications: CISA/CISSP/CCNP/CCSP/CISM/CRISC

Job description

IN_Senior Manager_IT Risk Assessment_Strategy, Governance, Risk & Compliance_Advisory_Bangalore Line of Service Advisory Industry/Sector Not Applicable Specialism Risk Management Level Senior Manager

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure.

Why PWC At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other.

Learn more about us At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.

J ob Description & Summary

A career within Cybersecurity and Privacy services will provide you with the opportunity to help our clients implement an effective cybersecurity program that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organizations, partners, and customers.

We play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrating and managing new or existing technology systems to deliver continuous operational improvements, increase their cybersecurity investment, and detect, respond, and remediate threats.

Responsibilities:

• Lead and conduct comprehensive IT risk assessments and audits.
• Develop and implement IT risk management frameworks and strategies.
• Provide expert guidance on ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.
• Oversee the evaluation of application infrastructure architecture and SaaS application architecture.
• Ensure robust database and middleware communication security.
• Implement and manage API security protocols.
• Deliver high-quality presentations and reports to senior stakeholders.
• Mentor and guide junior team members in IT risk assessment methodologies.
• Collaborate with cross-functional teams to enhance cybersecurity measures.

Mandatory Skill Sets:

• Extensive experience in IT Risk, ISO 27001, NIST, PCI, Data Privacy, and Cloud Security.
• Strong leadership and stakeholder management skills.
• Excellent communication and presentation abilities.

Preferred Skill Sets:

• Team Management, Strategic Planning, and Project Management.

Years of Experience Required: 1 0 + Years

Education Qualification: BE, B.Tech, M.Tech, MCA, MBA graduates. CISA, CISSP, CCNP, CCSP, CISM, CRISC, or equivalent.

Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Bachelor of LawsDegrees/Field of Study preferred: Certifications (if blank, certifications not specified)

Required Skills Litigation Optional Skills Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Cloud Security, Coaching and Feedback, Communication, Conducting Research, Creativity, Cyber Defense, Cyber Threat Intelligence, Embracing Change, Emotional Regulation, Empathy, Encryption, Inclusion, Influence, Information Security, Intellectual Curiosity, Intelligence Analysis, Intelligence Report, Intrusion Detection, Intrusion Detection System (IDS), IT Operations, Learning Agility {+ 24 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements Not Specified

Available for Work Visa Sponsorship? No

Government Clearance Required? No

Job Posting End Date August 31, 2026

Experience Level Senior Level