Cybersecurity

The Digital & Cyber Business Unit brings together deep technology expertise and bold thinking to help organizations thrive in a connected, data-driven world. We support clients in reimagining how they operate, serve, and grow—by harnessing the power of digital products, emerging tech, cloud, data, and cyber resilience.

Whether shaping enterprise-wide transformation or enabling targeted innovation, we work at the intersection of strategy, technology, and trust—delivering scalable solutions that empower clients to move faster, think smarter, and lead with confidence. 

A career in our Cyber Secrurity & Digital Trust technology services will allow you to work under the supervision of cyber security leadership within the Digital & Cyber Consulting practice. Use strategic business consulting skills to work with clients through all stages of strategy-based transformation projects. Provide support on client assignments that help to develop a strategy and then refocus an organization on making that strategy a reality. We are a growing team and looking for dynamic, flexible, proactive and hardworking consultants who have a passion for shaping cyber security positively in the GCC over the coming years. We have a strong pipeline of large, transformational opportunities with our clients which will provide great opportunities for all our people to step up and play significant and rewarding roles in an entrepreneurial and innovation driven environment.

Meaningful work you’ll be part of:

Project & Engagement Management:
Lead end-to-end delivery of AI-in-Cyber initiatives—from assessment and strategy to design, build, and optimization of use cases. Oversee project plans, budgets, risks, resources, and quality, ensuring measurable impact and stakeholder satisfaction.

Business Development:
Drive opportunity creation and management, including lead generation, solution design, demos, proofs of value, proposals, statements of work, and contracting. Collaborate across teams to shape offerings that align with client needs and PwC standards.

Strategic Leadership:
Define and implement enterprise strategies for AI-augmented cyber defense, connecting business value to measurable outcomes. Establish governance frameworks for responsible and secure AI use in SOC and incident response environments.

Risk & Policy (Usage-Level):
Develop and enforce policies for AI-assisted cybersecurity operations—covering data handling, access control, approvals, activity logging, and human-in-the-loop (HIL) reviews. Align with global standards including NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894, ENISA AI Threat Landscape, and OWASP Top 10 for LLM Applications, while ensuring compliance with privacy and regional regulations.

Stakeholder Engagement:
Advise CISOs, SOC leaders, and executives on AI-in-Cyber strategy and implementation. Translate technical insights into tangible business outcomes, strengthening stakeholder trust and alignment.

What you’ll do:

1) Threat Intelligence, Hunting & Incident Response Augmentation:
Automate cyber threat intelligence ingestion, normalization, and enrichment by linking entities and extracting TTPs mapped to MITRE ATT&CK. Convert intelligence into actionable detections and hunting use cases with measurable precision and recall. Enhance incident response through orchestrated workflows—covering scoping, evidence handling, executive communication, and retrospectives—supported by AI copilots and intelligent agents.

2) Secure Use of AI in Cyber Operations (Scope-Limited Guardrails):
Implement strict data governance through minimization, labeling, and DLP controls across retrieval and case documentation. Maintain audit trails, approval flows, and role-based access for sensitive operations. Apply safety measures including content filtering, grounding checks, and human validation for high-risk actions. Utilize private networking, managed encryption keys, and secured environments for AI components.

Ensure alignment with frameworks such as NIST AI RMF, ISO/IEC 42001/23894, ENISA AI Threat Landscape, and OWASP LLM Top 10. Adhere to privacy and regional obligations—including GDPR, CCPA, KSA SDAIA PDPL/NCA ECC, and UAE TDRA/CSC—while ensuring all SOC data and AI operations meet PwC’s global trust and compliance standards.