Associate Cyber Security Consultant (Data Privacy & GRC)

Line of Service
Advisory
Industry/Sector
Not Applicable
Specialism
Cybersecurity & Privacy
Management Level
Senior Associate
Job Description & Summary
At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
Job Description & Summary
In PwC’s Cybersecurity and Privacy Consulting practice, our work is always evolving to respond to industry trends and management focus, and we combine our deep technical skills in response to our clients' changing needs. Over time, what we do remains closely linked with helping our clients improve the way they operate, innovate and grow, reduce
costs, manage risks, leverage talent and change the way they do business.
Choose a career at PwC’s Cybersecurity and Privacy Consulting and enjoy an
innovative environment where challenging and interesting work is part of daily life.
Design and work on Cybersecurity framework based on business objectives and strategic imperatives of the client organization including goals, vision, mission, and operational plans
Designing and implementing data protection and privacy programs for our clients and supporting their business
Evaluating the data protection and privacy practices of our clients and Conducting Privacy Impact Assessments
Monitor processes and drive improvements in efficiency and quality of cyber-security programs
Assist in development of workflows for transitioning strategic plans into implementation plans and operational readiness
Facilitate strategic planning initiatives, documentation, technical roadmaps and security tool rationalization
Assist in designing the security organization structure including cyber defense.
Develop security policies, procedures, standards based on the security strategy and roadmap
Review of cyber security policies and processes to identify gaps in design of control based on comprehensive assessment framework
Maintain continuous communication with key stakeholders in support of the security strategy, and plan and solicit feedbacks, to uplift the programs and capabilities
Conduct security process implementation reviews to assess security effectiveness and reporting
Conduct Current State Assessment of cyber security practices against the defined controls and provide recommendations for to-be state
Run cyber security diagnostic assessments and develop programs for Cybersecurity skill development and enhancement
Implement security controls for realization of the certification requirements and provide technology roadmap based on the security strategy
Assisting in delivering privacy projects to acting as a subject matter expert on them or to leading a team towards excellent client experience.
Supporting and guiding our clients in adhering to the complex web of relevant national and international regulations (e.g. EU General Data Protection Regulation, PDPA and etc.).
Deploying processes and tools to help detect and prevent privacy breaches.
Ensuring a harmonized approach towards data protection and privacy by bringing together our client’s stakeholders (e.g. legal, compliance, risk, HR, security, business functions…).
Assisting clients in privacy related incident response activities.
Supporting the client’s team by acting as an interim team member (e.g. data protection officer, security officer, security manager, security analyst…)
Proactively identifying and pursuing opportunities for further business and team growth
Preferred skills
At least three years of experience in cyber-security advisory , System Integration (SI) or Security products
Bachelor’s degree in Computer Engineering, Computer Science, Information
Systems or a related field.
Have knowledge of industry standard classification schemes, such as ISO
27000, NIST. GDPR, TH PDPA, PCI DSS, Data Loss Prevention etc.
Have demonstrated self leadership, problem solving, including verbal and written communication skills. You need to be able to communicate clearly in both Thai and English
Have proven analytical, decision-making, and presentation skills.
Have a high level of MS Office proficiency.
Be able to work both independently and as part of a team with professionals at all levels
Minimum years experience required
1-2 years
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {+ 8 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date