Cybersecurity Experienced Consultant

About the role

Join PwC’s Cybersecurity team as an Experienced Consultant, working with a mix of security, risk, regulatory and technology experts to help organisations improve their security posture and navigate a fast‑changing threat landscape. You will partner with local and international clients to deliver practical, business‑focused cybersecurity and resilience solutions.

Key responsibilities

• Translate cybersecurity challenges into actionable business solutions and support transformation initiatives across operational resilience, AI security and governance.
• Design and enhance cybersecurity governance frameworks, policies, standards, processes and accountability models.
• Assess cyber, technology and operational risks in business processes, digital projects and existing environments, delivering clear recommendations.
• Build compliance roadmaps for regulations such as DORA and NIS2, and support audit readiness against ISO 27001 and NIST CSF.
• Evaluate and strengthen the security posture of AI and Generative AI deployments, focusing on data governance, access management and third‑party risk.
• Communicate technical risks in business terms to senior stakeholders and contribute to proposals and thought‑leadership content.

Required profile

• Bachelor’s or Master’s degree in Information Systems, Computer Science, Cybersecurity or a related discipline.
• 3–5 years of experience in information security, cybersecurity consulting or IT risk management.
• Strong understanding of risk management concepts, regulatory requirements and industry frameworks.

Required skills

• ISO 27001
• NIST CSF
• DORA
• NIS2
• AI security and Generative AI risk assessment
• Cybersecurity governance and operating model design
• Risk assessment methodologies

What we offer

• Exposure to diverse industries and senior stakeholders.
• Opportunities to develop expertise in cybersecurity strategy, regulatory compliance and emerging technologies.
• Path to own larger workstreams and shape client resilience strategies.