Cybersecurity Experienced Manager

About the role

PwC's Cybersecurity practice is looking for an Experienced Manager to join its advisory team, working alongside cybersecurity, risk, regulatory and technology specialists who support clients in financial services and other industries. The role leads complex client engagements at the intersection of cybersecurity, risk and regulation, helping organisations strengthen resilience and turn regulatory requirements into practical actions.

Key responsibilities

• Advise senior client stakeholders, including CISOs and IT security leaders, on cybersecurity governance, risk management and resilience strategies.
• Lead regulatory transformation programmes related to DORA, NIS2 and other frameworks, helping clients define compliance roadmaps.
• Assess and strengthen the security posture of AI and GenAI initiatives, covering governance, access controls, third-party risk and emerging threats.
• Translate technical risks into clear business insights for management and board-level decision-making.
• Drive the design and implementation of cybersecurity roadmaps, balancing risk reduction, operations and investment priorities.
• Lead client engagements end-to-end, coordinating teams, managing delivery risks and reviewing key outputs.
• Strengthen client relationships, identify emerging needs and contribute to business development, proposals and market opportunities.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Security, Management Information Systems or a related field.
• At least 5 years of experience in cybersecurity, information security, IT risk management or a related field.
• Advanced knowledge of cybersecurity governance, risk management and regulatory frameworks, including DORA, NIS2, EBA, CSSF requirements and the EU AI Act.
• Experience leading client engagements, managing teams and coaching junior professionals.
• English and French.

Required skills

• Advanced knowledge of ISO 27001 and ISO 42001, with experience applying them in client environments.
• Professional certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor, AAISM or AAIR are helpful.