Senior Associate / Manager - Cybersecurity Berater und Prüfer — PwC Switzerland

Full description

Strengthen our Cybersecurity & Privacy Team and work in an interdisciplinary environment with consultants, risk experts and technology specialists. Together, we help organizations effectively manage cyber risks, strengthen their digital resilience and meet regulatory requirements sustainably.

The role combines cyber strategy, governance, risk management, technology and transformation with cybersecurity audits, assessments and reviews in regulated and unregulated environments.

• Develop, implement and test cyber (risk) strategies, governance and risk management models and transformation initiatives, taking into account regulatory, organisational and technological requirements.
• Conducting cybersecurity audits and assessments (e.g. maturity assessments) in regulated and unregulated environments to create transparency about risks, maturity levels and the need for action.
• Translation of international frameworks (such as ISO 27001, NIST CSF and CIS) and regulatory requirements (such as FINMA, DORA and NIS2) into sustainable governance models, standards and controls.
• Assessing third-party and supply chain cyber risks as well as participating in the further development of continuous monitoring and governance mechanisms.
• Support for the further development of measures in the areas of cloud security, identity & access management, data security, threat & vulnerability management, security monitoring and incident response.
• Conduct workshops, interviews, briefings and produce high-quality results such as reports, playbooks, risk registers, control matrices and presentation-ready documents.
• Contribution to business development through participation in proposals, methodological results and the development of point-of-view papers (e.g. whitepaper) on current topics.
• Promote a culture of cooperation and quality, and continuously address threat and regulatory trends.
• 2–7 years of relevant professional experience in cybersecurity, IT or technology risk, preferably in a consulting, big-4 or regulated environment.
• Bachelor's or Master's degree in computer science, business informatics, business administration, engineering or an equivalent professional qualification.
• Certifications such as CISSP, CISM, CISA, CRISC or ISO 27001 Lead Implementer are beneficial.
• Understanding relevant cybersecurity standards, frameworks and best practices, in particular ISO/IEC 27001/27002, NIST CSF, CRI Profile, CIS Controls, CIS Benchmarks, MITRE ATT&CK and similar reference works are beneficial.
• Experience with or strong interest in regulatory requirements and resilience-related issues related to technology (such as FINMA 2023/01, DORA, NIS2).
• Familiarity with central topics such as cyber governance, IT and cyber risk management, security controls, cloud security, identity & access management, data security and security operations as well as their business-relevant classification.
• Structured, analytical and quality-oriented working methods as well as the ability to prepare complex issues appropriate to the addressee.
• Strong communication, presentation and stakeholder management skills in exchange with departments, risk and control functions as well as top management.
• Very good knowledge of German and English
• Knowledge of French is beneficial.
• High degree of initiative, self-organization and responsibility in a dynamic, team-oriented environment.

Questions about this listing