Risk Services - Financial Services Technology and Cyber Risk, Senior Associate

PwC Singapore; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

PwC Singapore seeks a Senior Associate to join the Technology, Cyber and Third Party Risk (TCTR) team within Risk Services. You’ll help clients understand technology and security risks, define risk strategies, and support control improvements across financial services clients.

The role emphasizes leadership in engagements, collaboration with stakeholders, and delivering practical, risk‑driven advice to strengthen client digital agendas.

Qualifications

• Degree in Business, Engineering, Computer Science, Information Technology (IT) or related disciplines with IT focus.
• CISA, CISM, CISSP, PMP or other professional certification is preferred.
• Demonstrated track record in leading engagements within a professional services or consulting environment, self-driven, and able to work in teams.
• Excellent communication skills – oral and written, and ability to convey complex messages clearly.
• Strong attention to detail and a constructive approach to mentoring colleagues.
• Ability to manage multiple tasks, prioritize responsibilities, and work independently.

Responsibilities

• Manage and deliver technology, cyber security, and third‑party risk assignments, including improving control environments and documenting work.
• Collaborate with clients to identify opportunities to strengthen key controls across cybersecurity and third‑party processes.
• Provide trusted, pragmatic advice aligned with client strategy to navigate risk decisions.
• Work on projects to improve processes, deliverables and thought leadership.
• Coach and train junior staff to develop communication, analytical, and technical skills.
• Develop toolkits, methodologies, and accelerators, including automation and AI enhancements.

Skills

Leadership

Communication

Teamwork

Self-driven

Multitasking

Education

Bachelor's degree in Business/Engineering/CS/IT

Tools

GRC tools

CyberArk

Zscaler

HSM

OneTrust

Coupa

Bitsight

ServiceNow

JIRA

AWS

GCP

Azure

Alibaba/Aliyun

Job description

Job Description & Summary

Join our diverse, global community at PwC, where we solve important problems together. You’ll develop your unique skills in exciting ways, powered by technology.

Line of Service

Assurance

Industry/Sector

TMT X-Sector

Specialism

Cybersecurity & Privacy

Management Level

Senior Associate

Job Description & Summary

Join our diverse, global community at PwC, where we solve important problems together. You’ll develop your unique skills in exciting ways, powered by technology.

Our Risk Services Practice provides critical insights and independent assurance to help clients protect and strengthen their businesses. We manage and mitigate risks from cybersecurity breaches to supply chain disruptions, covering technology, resilience, operations, data analytics, regulatory requirements, data security and privacy, internal audit, and third parties.

We build trust in clients’ digital agendas through robust technology, cyber and third party risk management in all industry sectors with a focus on financial services, including banks, insurers, asset managers, payment services, and fintechs.

Our practice is growing due to client demands for help with rapid development, regulatory complexities, and evolving digital risks. Supporting clients' confidence in their digital future is key to their growth, making our Technology, Cyber and Third Party Risk (TCTR) team a priority for our firm.

How will you value add?

We are seeking a number of experienced Senior Associate to join our TCTR team to respond to strong demand‑led growth. The team helps clients to understand their technology, cyber, third party risks and regulatory obligations , define and execute a strategy which enables the business to deliver its objectives within their desired risk appetite whilst meeting regulatory obligations.

We assist clients in understanding and challenging their current risk profiles; we develop and operationalise their risk management strategies; we advise and support their risk mitigation to stay competitive through building trust and resilience in their digital agenda. We cover a wide range of disciplines, including technology risk management, cyber security and risk management, third party risk management, cloud security and governance, and application controls, working with our specialist within specific domains.

Responsibilities

Client service

• Managing and delivering technology, cyber security, and third‑party risk assignments, such as improving control environments, risk management approach, producing documentation and reports, and quality assuring the work produced by junior team members.
• Collaborate with stakeholders such as clients to identify opportunities to improve their key controls across cybersecurity, business, technology and third party management processes
• Providing our clients with trusted advice, rooted in a pragmatic understanding of their business strategy, to help them navigate complex, risk‑driven risk decisions.
• Work on specific projects to substantially improve and evolve the capability and quality of the processes, deliverables and thought leadership
• Provide coaching and/or conduct training to junior staff to develop communication, analytical and technical skills
• Supporting the development of toolkits, methodologies, and accelerators including innovating to enable automation and the use of generative AI

About You

• A good Degree in Business, Engineering, Computer Science, Information Technology (IT) or related disciplines with IT focus
• CISA, CISM, CISSP, PMP or other professional certification is preferred
• Demonstrated track record in leading engagements within a professional services or consulting environment, self‑driven, combined with ability to work in teams effectively
• Excellent communication skills – both oral (for interviews/meetings, presentations) and written (for designing and writing engaging reports which communicate recommendations and actions succinctly and clearly convey the message in a way which is appropriate for the audience, and rooted in the client’s needs).
• A keen eye for detail and strong focus on encouraging quality work by all team members, and a constructive approach to developing and mentoring colleagues with those goals in mind.
• Demonstrated ability to effectively manage multiple tasks, prioritise responsibilities, and work independently to achieve goals.

Additional/Plus Experience:

• Knowledge or familiarity with risk and security management tools (e.g., GRC, CyberArk, Zscaler, HSM),
• Knowledge or familiarity with third party risk management tools (e.g.: Coupa, Bitsight, OneTrust, etc)
• Knowledge or familiarity on workflow management tools (e.g., ServiceNow, JIRA), etc
• Knowledge in cloud technologies of one or more cloud providers (e.g. Amazon Web Services, Google Cloud Platform, Microsoft Azure, Alibaba/Aliyun, etc)

Education

(if blank, degree and/or field of study not specified)

Degrees/Field Of Study Required

Degrees/Field of Study preferred:

Certifications

(if blank, certifications not specified)

Optional Skills

• Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Artificial Intelligence (AI) Platform, Auditing Methodologies, Cloud Engineering, Communication, Compliance and Governance, Compliance and Standards, Compliance Auditing, Corporate Governance, Creativity, Cybersecurity Governance, Cybersecurity Risk Management, Data Quality, Data Quality Assessment, Data Quality Assurance Testing, Data Validation, Embracing Change, Emotional Regulation, Empathy, Governance Framework, Inclusion, Information Assurance {+ 16 more}

Desired Languages

(If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

Yes