Senior Associate / Manager - Cybersecurity Consultant and Auditor

Your Team ## Strengthen our Cybersecurity & Privacy team and work in an interdisciplinary environment with consultants, risk experts, and technology specialists. Together, we support organizations in effectively managing cyber risks, strengthening their digital resilience, and sustainably meeting regulatory requirements. The role combines cyber strategy, governance, risk management, technology, and transformation with cybersecurity audits, assessments, and reviews in regulated and unregulated environments. Zürich, genf, Zürich By arrangement 100% Business Consulting All welcome ID: 740023WD Your Impact ## • Development, implementation, and auditing of cyber (risk) strategies, governance and risk management models, and transformation initiatives, taking into account regulatory, organizational, and technological requirements. • Execution of cybersecurity audits and assessments (e.g., maturity assessments) in regulated and unregulated environments to create transparency regarding risks, maturity levels, and the need for action. • Translation of international frameworks (such as ISO 27001, NIST CSF, and CIS) as well as regulatory requirements (such as FINMA, DORA, and NIS2) into viable governance models, standards, and controls. • Assessment of third-party and supply chain cyber risks as well as participation in the further development of continuous monitoring and governance mechanisms. • Support in the further development of measures in the areas of Cloud Security, Identity & Access Management, Data Security, Threat & Vulnerability Management, Security Monitoring, and Incident Response. • Conduct of workshops, interviews, briefings, as well as creation of high-quality results such as reports, playbooks, risk registers, control matrices, and presentation-ready documents. • Contribution to business development through collaboration on proposals, methodological results, and the development of point-of-view papers (e.g., whitepapers) on current topics. • Promotion of a culture of collaboration and quality as well as continuous engagement with threat and regulatory trends. Your Skill Set ## • 2-7 years of relevant professional experience in cybersecurity, IT, or technology risk, preferably in a consulting, Big-4, or regulated environment. • Bachelor's or Master's degree in computer science, business informatics, business administration, engineering, or an equivalent professional qualification. • Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer are an advantage. • Understanding of relevant cybersecurity standards, frameworks, and best practices, particularly ISO/IEC 27001/27002, NIST CSF, the CRI profile, the CIS Controls, CIS Benchmarks, MITRE ATT&CK, and comparable reference works are an advantage. • Experience with or a strong interest in regulatory requirements and resilience-related issues with a technology focus (such as FINMA 2023/01, DORA, NIS2). • Familiarity with central subject areas such as cyber governance, IT and cyber risk management, security controls, cloud security, identity & access management, data security, and security operations, as well as their business-relevant classification. • Structured, analytical, and quality-oriented way of working as well as the ability to prepare complex matters appropriately for the target audience. • Strong communication, presentation, and stakeholder management skills in exchange with specialist departments, risk and control functions, and top management. • Very good German and English skills; French skills are an advantage. • High degree of initiative, self-organization, and sense of responsibility in a dynamic, team-oriented environment. Your Benefits ## Hybrid Flexible Working Model Our working model allows you to spend part of your time in the office and part at home (if you wish) - unless you are on-site with a client, which of course always takes priority. This way, you can adapt your schedule to your personal working style. Education and Further Training Our learning and development offers help you acquire valuable skills and knowledge to advance your career - not just at PwC. We offer a variety of internal and external courses for education and further training. Recognize your strengths and your potential for improvement and develop new skills to achieve your professional goals. This will help you strengthen your confidence, improve your work performance, and advance your career. Sustainable Performance PwC is committed to creating an environment characterized by sustainable performance. We therefore provide a range of corresponding resources, such as workshops on sustainable performance, training in self-leadership, resilience and mindfulness training, nutrition webinars, and yoga classes. Holidays and Vacations From maternity, paternity, and adoption leave to holidays and paid leave: We know how important it is to take time away from work. At PwC, you can use holidays as well as a variety of leave options to recover, relax, or achieve personal goals. Volunteering Do you enjoy engaging for a good cause and want to make a difference? That's great, because we feel the same way. Therefore, we encourage you to volunteer through our corporate sustainability programs by offering you paid time off for voluntary activities. My Benefits Portal My Benefits is our platform for special offers and discounts. It gives you access to exclusive offers and discounts for a variety of products and services. Regardless of whether you are interested in the latest fashion trends, the trendiest tech products, or the best travel deals: On u