IT GRC Specialist (Manager)

About the role

PwC is looking for an IT GRC Specialist (Manager) in its Internal Firm Services line of service. You will join the IT team and help strengthen how technology risks, governance and compliance are managed across the firm, working closely with IT and business teams, management, control functions and auditors to maintain a robust IT control environment and meet evolving regulatory expectations.

Key responsibilities

• Lead and strengthen IT governance frameworks, policies, processes and procedures aligned with organisational objectives and regulatory requirements.
• Lead IT risk assessments across systems, infrastructure and operations, identifying vulnerabilities and defining risk treatment and mitigation strategies.
• Monitor IT risks, compliance controls and key risk indicators, turning findings and deviations into clear recommendations for management.
• Coordinate internal and external IT audits, ensuring findings and remediation actions are managed through to completion.
• Partner with IT and business teams to strengthen controls, implement corrective actions and continuously improve the IT risk and compliance environment.
• Provide clear risk and compliance reporting to management and stakeholders.
• Monitor regulatory, technology and threat developments and turn them into practical guidance and awareness across the organisation.

Required profile

• Bachelor's degree in IT or an equivalent field.
• 3-5 years of relevant experience in IT GRC, IT security or a related area, including supporting GRC initiatives, audits and compliance programmes.
• Fluent professional English and French (CEFR C1 in both).

Required skills

• Advanced IT risk and compliance: leading risk assessments, evaluating vulnerabilities and controls, and defining risk treatment and mitigation strategies.
• Proficiency in frameworks such as GDPR, DORA, CSSF Circulars, COBIT and ITIL, able to translate them into governance and compliance measures.
• Advanced IT controls and audit: coordinating internal and external audits, assessing control effectiveness and driving remediation.
• Preferred: ISO/IEC 27001 Lead Implementer or Lead Auditor, CRISC, CISSP, CISM or CISA, and COBIT 2019 or ITIL Foundation certification.