At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We are a tech-forward, people-empowered network with more than 364,000 people in 136 countries and 137 territories. Across audit and assurance, tax and legal, deals and consulting, we help clients build, accelerate, and sustain momentum. Find out more at www.pwc.com.
Line of Service
Assurance
Industry/Sector
TMT X‑Sector
Specialism
Cybersecurity & Privacy
Management Level
Associate
About Risk Services
Our Risk Services Practice provides an invaluable safeguard in today’s complex operating environment with insights and independent assurance. We work with clients to deliver business control to help them protect and strengthen every aspect of their business from people to performance, systems to strategy, business plans to business resilience. We help clients manage, mitigate and control risks from potential cybersecurity breaches to possible breaks in the supply chain. We assess and prepare businesses by looking into their technology, finance, data analytics, regulatory requirements, data security and privacy, internal audit, and the third parties our clients rely on, to help clients deliver quality results and meet their strategic objectives.
Key Responsibilities
- Execute audits and assessments on cybersecurity, IT systems and infrastructure and processes
- Collaborate with stakeholders such as clients and managers to identify opportunities to improve their key controls across cybersecurity, business and technology processes
- Provide assurance and advisory related services through all major milestones of the sales and delivery lifecycles including identification, proposal development, planning, fieldwork, reporting and debrief processes
- Work on specific projects to substantially improve and evolve the capability and quality of the processes, deliverables and thought leadership
- Provide coaching and/or conduct training to junior staff to develop communication, analytical and technical skills
What We Are Looking For
- Final year students in Business, Engineering, Computer Science, Information Technology (IT) or related disciplines with IT focus or experience in IT Audit and Risk/ Control experience
- Demonstrated track record in leading engagements within a professional services or consulting environment, combined with ability to work in teams effectively
- Strong verbal and written communication skills
- Good presentation skills, both oral and written
- Able to work in a fast‑paced environment
- Good analytical, organizational, and conceptual skills
- Excellent soft skills and able to manage stakeholders across multiple disciplines
- Excellent project management skills and a demonstrated ability to follow through and complete tasks within tight deadlines
- Experience in management and/or assessment of adequacy of controls over technology activities at financial institutions is preferred.
- Familiar with regulatory requirements such as MAS Notices and Guidelines related to technology, cyber security and outsourcing risk management etc. is a plus
- Experience in cybersecurity processes such as vulnerability and threat management, patch management and identity and access management is a plus
- Ability to provide recommendations, approaches and good industry practices
- Experience in providing regular communication and preparing reports and presentations for clients and senior stakeholders
- Good interpersonal skills to successfully interact with internal and external stakeholders such as clients, managers and team members
- CISA, CISM, CISSP, PMP or other professional certification is preferred