Manager / Senior Manager Conseil & Audit en Gestion des Cyber-risques & Conformité Réglementaire — PwC Switzerland

Full description

Join our Cybersecurity & Privacy team and evolve in an interdisciplinary environment alongside consultants, risk management experts and technology specialists. Together, we support organizations in managing their cyber-risks, strengthening their digital resilience and ensuring sustainable compliance with regulatory requirements. This role is at the crossroads of cyber strategy, governance, risk management, technology and transformation. It also includes conducting cybersecurity audits and evaluations in regulated environments.

• Pilot and implement multidisciplinary projects to help our clients determine the applicability and implications of cybersecurity laws, regulations and requirements, and ensure compliance.
• Transforming legal and regulatory obligations into concrete and robust cyber devices: cyber and risk management strategies, governance and risk management models, policies, control frameworks, target business models and risk-based implementation roadmaps.
• Develop and evaluate regulatory compliance programs in cybersecurity, including inventory of regulatory requirements, mapping of obligations and controls, accountability models, evidence management, control review, management of deviations and corrective actions, indicators, reporting and monitoring of regulatory developments.
• Assess the level of regulatory readiness, compliance and maturity of our clients, and support them in the implementation, testing and independent reviews in order to strengthen their resilience.
• Advise and audit our clients on the capabilities expected by the various regulatory frameworks, including e-risk management, incident response and regulatory reporting, third party and supply chain security, vulnerability management, secure product development, business continuity and management oversight.
• Conduct workshops and information sessions with boards of directors, directorates-general and stakeholders in the legal, compliance, risk, IT, security, etc. functions in order to transform complex regulatory and technical issues into clear decisions and concrete actions.
• To act as a trusted advisor and privileged interlocutor for our clients, while managing all stages of the missions: defining the scope, coordinating teams, managing budget and quality, and aligning the expectations of the various stakeholders.
• Produce high-quality and directly exploitable deliverables, such as reports, playbooks, risk registers, control matrices and presentation media for governing bodies.
• Develop sustainable customer relationships and contribute to the growth of our business by participating in the preparation of business proposals, the development of methodologies and deliverables, the drafting of views on topical issues and collaboration within the PwC network.
• Coach, coach and support team members in their development, while contributing to a collaborative, inclusive and quality-oriented working environment.
• You have 6 to 10 years of relevant professional experience in cybersecurity or technology risk management, ideally acquired in the board, in a Big Four or in a regulated environment.
• Certifications such as CISSP, CISM, CISA, CRISC or ISO 27001 Lead Implementationer are an asset.
• You have a good understanding of cybersecurity standards, frameworks and best practices, including ISO/IEC 27001/27002, NIST CSF, CRI Profile, CIS Controls, CIS Benchmarks, MITRE ATT&CK or other comparable standards.
• You have experience with regulatory requirements and resiliency issues related to technologies, or you have a strong interest in these topics, such as FINMA 2023/01, DORA and NIS2.
• You are comfortable with the main areas of cybersecurity (Cyber Governance, IT & Cyber Risk Management, Security Controls, Cloud Security, Identity & Access Management, Data Security and Security Operations), and you know how to put them in their context and business issues.
• You are distinguished by a structured, analytical and quality-oriented approach, as well as by your ability to synthesize and present complex topics in a clear and tailored way to your audience.
• You have excellent skills in communication, presentation and management of stakeholders and are comfortable in exchanges with trades, risk/control functions as well as with members of the general management.
• You have experience in leading teams, whether they are line teams and/or project teams.
• You have a strong business spirit and experience in preparing proposals, developing markets and building long-term customer relationships.
• You demonstrate a high level of autonomy, initiative, organization and responsibility, and enjoy evolving in a dynamic and collaborative environment.
• You have a Bachelor's degree or Master's degree in Computer Science, Management Computer Science, Business Administration, Engineering, or an equivalent professional qualification.
• You have perfect command of French and English; knowledge of German is an asset.

Questions about this listing