Cybersecurity Experienced Consultant

About the role

PwC's Cybersecurity team is looking for an Experienced Consultant (Senior Associate level) to join its advisory practice. You will work alongside cybersecurity, risk, regulatory and technology specialists, collaborating across PwC teams and with local and international clients to strengthen their security posture and resilience. The role sits within the Technology line of service.

Key responsibilities

• Translate cybersecurity challenges into practical, business-focused solutions and contribute to security, risk and regulatory transformation initiatives.
• Design and enhance cybersecurity governance and security operating models, including policies, standards, processes, controls and accountability frameworks.
• Assess cybersecurity, technology and operational risks across business processes, digital initiatives and existing technology environments, turning findings into actionable recommendations.
• Support clients in meeting regulatory expectations such as DORA, NIS2 and related frameworks through prioritised compliance roadmaps.
• Evaluate and strengthen the security posture of AI and GenAI deployments, covering data governance, access management, third-party risk and emerging threats.
• Assess organisational maturity against ISO 27001 and NIST CSF, supporting audit readiness, certification and continuous improvement.
• Communicate technical risks clearly to senior stakeholders and contribute to proposals, thought leadership and the adoption of new technologies, including AI-enabled tools.

Required profile

• Bachelor's or Master's degree in Information Systems, Computer Science, Cybersecurity or a related field.
• 3-5 years of experience in information security, cybersecurity consulting, IT risk management or a related discipline.
• Fluent in English and French.
• Experience in cybersecurity, risk, governance or compliance engagements with clients and multidisciplinary teams.

Required skills

• Advanced knowledge of cybersecurity risk management, including threats, vulnerabilities, risk appetite, risk tolerance and risk assessment methodologies.
• Proficiency in cybersecurity and regulatory frameworks such as DORA, NIS2, EBA guidelines, CSSF expectations, the EU AI Act, ISO 27001 and NIST CSF.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CISM, CISSP, CCSP, AAISM or AAIR are a plus.