Senior Manager, Technology, Cyber and Third Party Risk

About the role

PwC's Risk Services practice delivers independent assurance and insight to help clients protect their businesses against risks ranging from cybersecurity breaches to supply chain disruption. Its Technology, Cyber and Third Party Risk (TCTR) team advises clients on their technology, cyber and third party risks and regulatory obligations, helping them define and run risk strategies within their risk appetite. The firm is seeking several experienced Senior Managers to join the TCTR team.

Key responsibilities

• Manage and deliver technology, cyber security and third-party risk assignments, including improving control environments, producing documentation and reports, and quality assuring the work of juniors.
• Work with clients to identify opportunities to improve key controls across cybersecurity, business, technology and third party management.
• Advise clients pragmatically on risk-driven decisions and take part in projects that improve process capability and thought leadership.
• Build client relationships and provide advisory services across the sales and delivery cycle, from proposal development to reporting and debrief.
• Support the development of toolkits, methodologies and accelerators, including automation and the use of generative AI.
• Coach and train junior staff in communication, analytical and technical skills.

Required profile

• Degree in Business, Engineering, Computer Science, IT or a related discipline with an IT focus.
• At least 3 years of technology, cyber or third party risk and control experience in a Big 4 or leading organisation.
• Proven track record leading engagements in a professional services or consulting environment, with excellent communication and project management skills.
• CISA, CISM, CISSP or PMP preferred.
• Preferred: business development or sales experience, including bid teams and RFPs; experience assessing risk and controls at financial institutions; knowledge of frameworks such as MAS Notices, CSA, NIST, ISO 27000, SOC 1/2/3.

Required skills

• Familiarity with GRC, CyberArk, Zscaler, HSM, Coupa, Bitsight, OneTrust, ServiceNow, JIRA and cloud platforms such as AWS, GCP or Azure is additional.