Risk Services - Cybersecurity Associate (July 2027 Intake)

PwC; Singapore; On-site; SGD 65,000 - 90,000; Full time

Job summary

PwC Singapore is seeking a cybersecurity generalist within Risk Services to provide comprehensive security solutions and governance across client engagements. You will apply a broad understanding of cybersecurity principles to address diverse security challenges, from threat modelling to data protection and security monitoring.

Join a tech-forward, people-empowered network with global reach, focusing on safeguarding client systems and building resilient security programs.

Qualifications

• Bachelor’s or Master’s degree in IT, CS, or cybersecurity.
• Strong analytical and communication abilities.
• Able to work in teams and independently.
• Solid foundation in security concepts and standards (NIST CSF, ISO 27001, MITRE ATT&CK).
• Familiarity with DLP, CNAPP, NDR, EDR, PAM, and AI Guardrail solutions.
• Experience in a professional services firm is advantageous.

Responsibilities

• Support cybersecurity strategy and governance engagements.
• Perform security assessments such as threat modelling and architecture review.
• Advise on risk assessments, compliance, data protection, and security monitoring.
• Contribute to cloud security engagements including architecture design and posture assessments.
• Support emerging security services like AI security initiatives.

Skills

Analytical skills

Communication skills

Team player

Security frameworks

Cloud platforms

Professional services experience

Education

Bachelor’s or Master’s degree in IT, CS, or cybersecurity

CISSP, CISA, CRISC or related certification

Job description

At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We’re a tech-forward, people-empowered network with more than 370,000 people in 149 countries. Across audit and assurance, tax and legal, deals and consulting we help clients build, accelerate and sustain momentum. Find out more at www.pwc.com

About Risk Services

Our Risk Services Practice provides an invaluable safeguard in today’s complex operating environment with insights and independent assurance. We work with clients to deliver business control to help them to protect and strengthen every aspect of their business from people to performance, systems to strategy, business plans to business resilience. We help clients manage, mitigate and control risks from potential cybersecurity breaches to possible breaks in the supply chain. We assess and prepare businesses by looking into their technology, finance, data analytics, regulatory requirements, data security and privacy, internal audit, and the third parties our clients rely on, to help clients deliver quality results and meet their strategic objectives.

As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

Key Responsibilities

• Support delivery of cybersecurity strategy and governance and CISO advisory related engagements
• Conduct technical security assessments such as threat modelling, security architecture review
• Provide advisory services related to CII risk assessments, CCoP compliance, CTM, ISO 27001, data protection and security monitoring
• Take part in cloud security related engagements including cloud security architecture design, posture assessments, etc.
• Support delivery of emerging tech security and risk management related services including “Security for AI” and “AI for Security” related services

What We Are Looking For

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Computer Engineering, Cybersecurity, or related disciplines.
• Self motivator with good analytical and communication skills.
• Comfortable working in team settings while also demonstrating the ability to quickly learn, adapt and perform effectively as an individual contributor
• Strong foundation in cyber / information security concepts and exposure to widely accepted security standards and methodologies such as NIST CSF, Singapore’s CTM, ISO 27001, MITRE ATT&CK, etc.
• Exposure / understanding of capabilities of various cybersecurity solutions such as DLP, CNAPP, NDR, EDR, PAM, AI Guardrail solutions.
• Experience with cloud platforms and workloads such as M365, AWS, Azure.
• Having obtained at least one cybersecurity / information security related certification such as CISSP, CISA, CRISC or any other relevant certification would be advantages.
• Prior experience working in a professional services firm will be highly advantageous.