Cyber Governance, Risk & Compliance (GRC) - Senior Associate

About the role

PwC's Cybersecurity team in Singapore supports clients on Cyber Strategy, Risk & Transformation, Digital Identity & Access Management, Cyber Defense and Cloud, Data & AI Security. The Cyber Strategy, Risk & Transformation team helps clients strengthen governance and risk management. As a Senior Associate, you will contribute to the design, execution and delivery of cyber GRC engagements across industries, working closely with senior stakeholders.

Key responsibilities

• Develop and enhance cybersecurity governance materials such as policies, standards, procedures, control frameworks and RACI models.
• Design and support enterprise security strategies, cyber target operating models and transformation roadmaps.
• Perform readiness assessments aligned to regulatory, industry and client-specific requirements.
• Run risk management activities including risk identification, scoring, control testing, KRIs/KPIs development and reporting enhancements.
• Support GRC technology enablement through requirements gathering, workflow mapping, control library development and dashboard reporting.
• Facilitate workshops, interviews and stakeholder discussions to gather insights and validate findings.
• Work with cross-functional project teams and stay up to date on emerging regulations, risks, technologies and best practices.

Required profile

• 3-5 years of experience in cybersecurity governance, risk management and compliance.
• Bachelor's degree in Computer Science, Information Systems, Information Technology, Engineering or a related field; equivalent experience may be considered.
• Preferred certifications: CRISC, CISM, CISSP.
• Ability to manage multiple priorities and deliver quality work under tight timelines, with strong communication and stakeholder engagement skills.

Required skills

• Hands-on experience developing or reviewing cybersecurity policies, standards, procedures and control frameworks.
• Experience with cyber maturity assessments, compliance reviews or risk assessments.
• Hands-on experience with GRC tools such as ServiceNow GRC, Archer and OneTrust.
• Familiarity with NIST CSF, ISO 27001, COBIT, MAS TRM and PDPA.
• Knowledge of IAM, Oracle Cloud Infrastructure (OCI) Identity & Access Management and Oracle Identity Manager (OIM).