Risk Services - Cybersecurity Audit and Data Protection Associate (July 2027 Intake)

About the role

PwC's Risk Services practice delivers independent assurance and business control advice, helping clients manage risks from cybersecurity breaches to supply-chain disruptions. This July 2027 intake associate role covers cybersecurity and data protection services, assessing clients' data protection practices against local regulations such as the PDPA in Singapore and international standards such as GDPR, ISO 27701, ISO 27001 and NIST frameworks.

Key responsibilities

• Support assessments of clients' data protection practices against local and international standards
• Assist in gap analyses and compliance assessments, producing detailed reports with actionable recommendations
• Help plan and run technology and cybersecurity audits, gathering audit evidence and evaluating IT controls
• Identify risks and vulnerabilities in IT systems and processes, and write clear audit reports with findings and recommendations
• Conduct compliance reviews against standards such as the CSA Cybersecurity Code of Practice
• Use data security and privacy tools, take part in cyber simulation exercises and collaborate with client teams to improve cybersecurity posture

Required profile

• Final-year student or recent graduate in Computer Science, Computer Engineering, Information Technology, Cybersecurity or a related discipline
• Strong fundamentals in IT, networking and cybersecurity, and basic knowledge of cryptography and DLP
• Knowledge of data privacy principles, cybersecurity frameworks and regulations, and common vulnerability classes such as the OWASP Top 10
• Working knowledge of at least one scripting language (Python, Bash, PowerShell); automation and adaptability are a plus
• Offensive security certifications (OSCP, CEH, etc.) or active participation in CTFs and open-source security tools

Required skills

• Familiarity with cloud security tools (Microsoft 365, AWS, Azure)
• Common security testing tools (Kali Linux, Burp Suite, Nmap, Metasploit, BloodHound)
• Database security fundamentals
• Ability to explain technical concepts to non-technical stakeholders and to work in a team

Applicants should state a first-choice and, where possible, a second-choice role, and upload a resume and academic transcript in PDF format. Shortlisted candidates only will be contacted.