Digital Risk & Resilience Manager

About the role

PwC Ireland is looking for an experienced Manager to join its Digital Risk and Resilience team, reporting to the Digital Risk and Resilience partner. You will lead or execute a team delivering complex, strategic client engagements across financial services, aviation, energy and utilities, pharmaceuticals, asset and wealth management, telecommunications, social media and technology. The team helps Irish and global organisations navigate IT, cybersecurity and third-party risk challenges, build resilience and comply with regulations such as DORA.

Key responsibilities

• Advise clients on embedding digital, cyber and third-party risk management into their governance and risk frameworks.
• Lead engagements assessing, designing and improving operational and digital resilience, including business impact analysis, impact tolerances, scenario testing and response and recovery plans.
• Map people, processes, technology, data, facilities and third parties, identify single points of failure and concentration risk, and turn the results into remediation roadmaps.
• Design and run severe-but-plausible scenario tests (cyber attack, third-party and cloud outage, data integrity, ransomware) and report findings to boards and regulators.
• Support crisis simulation and tabletop exercises for executives and boards, including designing injects, chairing the exercise and leading debriefs.
• Support ICT third-party risk management, from due diligence and contracts to monitoring and exit planning.
• Help clients build and maintain DORA registers and prepare for ICT incident classification and regulatory reporting.
• Scope, coordinate and deliver internal audit reviews focused on technology, working with internal audit and cyber teams.
• Manage and coach junior team members, contribute to proposals, and build and maintain client relationships.

Required profile

• 3 to 5 years' experience in digital risk, operational resilience, cybersecurity or related fields within a professional services firm or large industry environment.
• Bachelor's degree in commerce, finance, technology, computer science or a similar field.
• Proven track record leading complex projects in ICT governance, third-party risk, cyber incident management and control testing.
• Experience advising senior executives and strong leadership and stakeholder management skills.
• Experience designing and facilitating scenario tests and crisis simulations with executive-level participants is preferable.

Required skills

• In-depth knowledge of operational resilience frameworks and regulations such as DORA and NIS2.
• Hands-on experience of service and dependency mapping and setting and testing against impact tolerances.
• Relevant certifications such as CISSP, CISA, CISM, CRISK or ITIL are desirable.