Risk Services - Cybersecurity Audit and Data Protection Associate (July 2027 Intake)

PwC; Singapore; On-site; SGD 52,000 - 72,000; Full time

Job summary

PwC Singapore’s Risk Services Associate position offers hands-on exposure to cybersecurity and data protection engagements across industries. You will work with a team to assess client privacy controls, perform audits, and help strengthen IT security governance and risk management.

The role emphasizes collaboration, analytic thinking, and communication with stakeholders. You will gain experience with regulatory standards, security controls, and privacy-by-design principles, while contributing to

Qualifications

• Final-year student or recent graduate in Computer Science, Computer Engineering, Information Technology, Cybersecurity.
• Solid grounding in information technology, networking, and cybersecurity concepts.
• Basic understanding of cryptography, data loss prevention, and cloud security principles.
• Familiarity with cloud security principles and tools (Microsoft 365, AWS, Azure) and common security testing tools.
• Knowledge of data privacy principles, cybersecurity frameworks, and OWASP Top 10.
• Working knowledge of at least one scripting language (Python, Bash, PowerShell).

Responsibilities

• Collaborate with the team to deliver comprehensive cybersecurity and data protection services to clients.
• Support assessments of clients’ data protection practices against local regulations (PDPA in Singapore) and international standards (GDPR, ISO 27701, ISO27001, NIST).
• Assist in performing gap analyses and compliance assessments, contributing to detailed reporting and actionable recommendations.
• Assist in the planning and execution of technology and cybersecurity audits.
• Collaborate with clients’ teams to gather necessary audit evidence and documentation, evaluating the design and operating effectiveness of IT controls.
• Identify potential risks, vulnerabilities, and areas for improvement within IT systems and processes, preparing clear and concise audit reports, including findings and recommendations for management.
• Conducting compliance reviews against technology standards and regulations such as CSACcoP, ISO27001, and others.
• Engage with various tools and technologies used in data security, privacy management, and risk assessment, participating in cyber simulation exercises.

Education

Final-year student or recent graduate in Computer Science/Computer Engineering/Information Technology/Cybersecurity

Tools

Microsoft 365

AWS

Azure

Job description

Line of Service

Assurance

Industry/Sector

TMT X-Sector

Specialism

Cybersecurity & Privacy

Management Level

Associate

Job Description & Summary

At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We’re a tech-forward, people-empowered network with more than 364,000 people in 136 countries and 137 territories. Across audit and assurance, tax and legal, deals and consulting, we help clients build, accelerate, and sustain momentum. Find out more at www.pwc.com.

About Risk Services

Our Risk Services Practice provides an invaluable safeguard in today’s complex operating environment with insights and independent assurance. We work with clients to deliver business control to help them to protect and strengthen every aspect of their business from people to performance, systems to strategy, business plans to business resilience. We help clients manage, mitigate and control risks from potential cybersecurity breaches to possible breaks in the supply chain. We assess and prepare businesses by looking into their technology, finance, data analytics, regulatory requirements, data security and privacy, internal audit, and the third parties our clients rely on, to help clients deliver quality results and meet their strategic objectives.

Key Responsibilities

As an Associate, your responsibilities include but are not limited to:

• Collaborate with the team to deliver comprehensive cybersecurity and data protection services to clients.
• Support assessments of clients’ data protection practices against local regulations (such as PDPA in Singapore) and international standards (e.g., GDPR, ISO 27701, ISO27001, NIST Cybersecurity and Privacy frameworks).
• Assist in performing gap analyses and compliance assessments, contributing to detailed reporting and actionable recommendations.
• Assist in the planning and execution of technology and cybersecurity audits.
• Collaborate with clients’ teams to gather necessary audit evidence and documentation, evaluating the design and operating effectiveness of IT controls.
• Identify potential risks, vulnerabilities, and areas for improvement within IT systems and processes, preparing clear and concise audit reports, including findings and recommendations for management.
• Conducting compliance reviews against technology standards and regulations such as CSA Cybersecurity Codes of Practice (CSACcoP), ISO27001, and others.
• Engage with various tools and technologies used in data security, privacy management, and risk assessment, participating in cyber simulation exercises.
• Collaborate across multidisciplinary teams, assisting with the establishment and uplift of data and cybersecurity measures for our clients and supporting projects aimed at enhancing clients’ cybersecurity posture.

What We Are Looking For

• Final-year student or recent graduate in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or related disciplines from reputable local or overseas universities.
• Strong fundamentals in information technology, networking principles, and cybersecurity concepts.
• Basic understanding of network and cryptography principles, and data loss prevention (DLP) technologies.
• Familiarity with cloud security principles and tools (e.g., Microsoft 365, AWS, Azure), common security testing tools(e.g.,Kali Linux, Burp Suite, Nmap, Metasploit, Covenant,BloodHound)and database security fundamentals.
• Knowledge of data privacy principles, cybersecurity frameworks, and regulations, along with understanding common vulnerability classes(e.g.OWASP Top 10), exploitation techniques, and defensive concepts.
• Working knowledge of at least one scripting language (e.g., Python, Bash, PowerShell) – the ability to automate and adapt is a plus.
• Strong analytical thinking, critical thinking, and problem-solving skills; ability to explain highly technical concepts to non-technical stakeholders.
• Excellent interpersonal and communication skills.
• Ability to work collaboratively in a team environment, showing initiative and eagerness to learn.
• Offensive security certifications such as OSCP, CRT, CRTO, CEH,eJPT,eCPPT, or similar (or working towards them).
• Genuine passion for offensive security with active participation in CTFs and contributions to open-source offensive security tools.

Education

(if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications

(if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Azure Data Factory, Communication, Cybersecurity, Cybersecurity Governance, Data Architecture Development, Data Archiving, Data Flow Mapping, Data Privacy Act, Emotional Regulation, Empathy, Enterprise Content Management, Incident Response Plan, Inclusion, Information Rights Management (IRM), Information Security, Information Security Governance, Information Security Management System (ISMS), Intellectual Curiosity, IT Infrastructure, Operating Model, Optimism, Privacy and Security {+ 6 more}

Desired Languages

(If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

No

Job Posting End Date