Senior Associate – Cybersecurity Third Party Risk Management

About the role

PwC is seeking a Senior Associate to join its Cybersecurity Third Party Risk Management (TPRM) team. You will work with a group of problem‑solvers to design, implement and operate TPRM programmes for clients across multiple sectors, helping them protect their supply‑chain and third‑party relationships.

Key responsibilities

• Plan, design and implement TPRM programmes for diverse clients.
• Operate and manage Cybersecurity/Information Security TPRM managed‑service engagements.
• Conduct assessments against leading frameworks such as ISO 27001 and NIST 2.0, identifying risks and recommending remediation.
• Collaborate with clients to understand business requirements and ensure high‑quality delivery.
• Stay current with emerging TPRM technologies, threat landscapes and industry trends, integrating insights into solutions.
• Provide subject‑matter expertise on TPRM‑related regulations across sectors.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field (Master’s preferred).
• Minimum 3 years of hands‑on experience delivering Information Security/TPRM projects.
• Proven track record of delivering complex consulting engagements.
• Strong understanding of information‑security domains (access control, asset management, encryption, network security, etc.).
• Experience with GRC platforms such as Archer, OneTrust or Aravo.
• Knowledge of security frameworks and regulations (ISO 27001, NIST, DORA, NISD 2).
• Excellent written and verbal communication skills and ability to explain technical concepts to non‑technical stakeholders.
• Demonstrated ability to manage multiple projects simultaneously and meet deadlines.

Required skills

• ISO 27001
• NIST 2.0
• DORA
• NISD 2
• Archer
• OneTrust
• Aravo
• Access Control
• Asset Management
• Encryption
• Network Security
• Artificial Intelligence (AI) concepts (beneficial)