Cyber Governance, Risk & Compliance (GRC) – Senior Associate

About the role

PwC’s Cybersecurity team is looking for a Senior Associate to help clients strengthen governance, risk and compliance capabilities. You will work on diverse GRC engagements, partnering with senior stakeholders to design and deliver practical, business‑aligned outcomes.

Key responsibilities

• Develop and enhance cybersecurity governance artefacts such as policies, standards, procedures, control frameworks and RACI models.
• Design enterprise security strategies, target operating models and transformation roadmaps.
• Conduct readiness assessments against regulatory, industry and client‑specific requirements.
• Execute risk management activities, including risk identification, scoring, control testing, KPI/KRI development and reporting.
• Support GRC technology enablement through requirements gathering, workflow mapping, control library creation and dashboard reporting.
• Facilitate workshops, interviews and stakeholder discussions to gather insights and validate findings.
• Collaborate with cross‑functional project teams to ensure timely delivery of engagement outcomes.
• Stay current on emerging regulations, cyber risks, technologies and best practices.

Required profile

• 3–5 years of experience in cybersecurity governance, risk management and compliance.
• Hands‑on experience developing or reviewing cybersecurity policies, standards, procedures and control frameworks.
• Experience conducting cyber maturity assessments, compliance reviews or risk assessments.
• Comfortable working in dynamic environments with evolving client needs.

Required skills

• ServiceNow GRC
• Archer
• OneTrust
• NIST CSF
• ISO 27001
• COBIT
• MAS TRM
• PDPA