P

PricewaterhouseCoopers (PwC)

Global professional services: assurance, tax, consulting

Senior Consultant - Cybersecurity, GRC

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeNeuilly-sur-Seine, FranceNo salary listedIn-person

About the Job

Requirements

  • At least 3 to 5 years of experience in GRC, security auditing, compliance, or cyber risk, ideally acquired in a consulting firm or a large organization.
  • Strong command of frameworks and regulations including ISO 27001, ISO 27005, DORA, NIS2, GDPR, ISO 22301, EBIOS RM, and NIST CSF.
  • Ability to move quickly between strategic and operational perspectives.
  • Good interpersonal skills, ease in discussions with decision-makers, and persuasive ability.
  • Excellent written and oral communication, with a sense of pedagogy and leadership.
  • Team spirit, autonomy, curiosity, and an interest in new or evolving topics.
  • Proficiency in English; C1 level is recommended and English is essential in an international environment.

Responsibilities

  • Conduct risk analyses using EBIOS RM, ISO 27005, NIST RMF, and other methods, including asset collection, concrete attack-scenario definition, and impact and likelihood assessment.
  • Define and track indicators and key risk indicators for critical risks, trends, and remediation follow-up.
  • Challenge risk, cost, and deadline trade-offs with business departments, IT departments, and information security leadership.
  • Perform compliance assessments and establish related compliance plans, including for ISO 27001, DORA, NIS2, and GDPR.
  • Lead corrective-measure implementation, including establishing controls, documenting procedures for risk, vulnerability, and security-incident management, collecting evidence, and preparing and conducting internal audits.
  • Build or strengthen governance frameworks, including security policies, roles and responsibilities, essential processes, committees, key performance indicators, and reporting.
  • Define or deploy transformation plans, including building security roadmaps, raising awareness and employee engagement, and promoting risk culture.
  • Support integration of security into business decision-making so cybersecurity acts as an enabler rather than a blocker.
  • Co-facilitate workshops and structure deliverables such as scoping notes, presentations, risk matrices, security policies, and dashboards.
  • Present recommendations to clients, including information security leaders, IT departments, executive committees, and business functions.
  • Coach junior consultants to support their skills development.

Desired Qualifications

  • Experience in GRC, security auditing, compliance, or cyber risk acquired in a consulting firm or large organization is preferred.
  • C1-level English is recommended.

About the Company

PricewaterhouseCoopers (PwC)

Global professional services: assurance, tax, consulting

PwC provides assurance (audit), tax, legal services, consulting and deals advisory to organisations worldwide. It uses multidisciplinary teams across accounting, advisory, technology and industry, delivered through a global network of locally established firms that collaborate with technology partners to offer AI, cloud, managed services and digital trust. PwC differentiates itself with an integrated, global-local service model and technology-enabled offerings that address complex client needs across risk, transformation, reporting and sustainability. Its goal is to help clients improve governance, efficiency and value by supporting reporting accuracy, business transformation, risk management and sustainable practices.

Company size
10,001+
Company stage
Early VC
Total funding
$3.3M
Headquarters
London, United Kingdom
Founded
1989

Recently Posted Jobs

Explore more opportunities at PricewaterhouseCoopers (PwC)

See more jobs