Cybersecurity Audit & Data Protection Associate – July 2027 Intake

About the role

PwC’s Risk Services practice is looking for an Associate to join its Cybersecurity Audit and Data Protection team for the July 2027 intake. You will work with clients to assess and improve their cybersecurity posture and data‑protection compliance across a range of regulatory frameworks.

Key responsibilities

• Collaborate with the team to deliver comprehensive cybersecurity and data‑protection services.
• Support assessments of clients’ data‑protection practices against local regulations (e.g., PDPA) and international standards (e.g., GDPR, ISO 27701, ISO 27001, NIST).
• Assist in performing gap analyses, compliance assessments and preparing detailed reports with actionable recommendations.
• Help plan and execute technology and cybersecurity audits, gathering audit evidence and evaluating IT control effectiveness.
• Identify risks, vulnerabilities and improvement opportunities, and prepare clear audit reports.
• Conduct compliance reviews against standards such as CSA Cybersecurity Codes of Practice and ISO 27001.
• Engage with tools and technologies used in data security, privacy management and risk assessment, including participation in cyber‑simulation exercises.
• Work across multidisciplinary teams to uplift clients’ cybersecurity measures and support projects that enhance their security posture.

Required profile

• Final‑year student or recent graduate in Computer Science, Computer Engineering, Information Technology or a related discipline.

Required skills

• Knowledge of Singapore PDPA and international data‑protection regulations such as GDPR.
• Familiarity with ISO 27701, ISO 27001, NIST Cybersecurity Framework and CSA Cybersecurity Codes of Practice.
• Experience with risk assessment and cybersecurity audit methodologies.