A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resiliency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe. The Integrated Risk Management and Governance Risk and Compliance (IRM GRC) team helps clients to think about their integrated GRC strategy, process improvement, governance models, tech implementation, how to drive change in the organization. We work to solve business problems for example from siloed to integrated risk management operating model or from fragmented data and technology to enterprise GRC technology and analytics.

To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.

As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

• Use feedback and reflection to develop self awareness, personal strengths and address development areas.
• Delegate to others to provide stretch opportunities, coaching them to deliver results.
• Demonstrate critical thinking and the ability to bring order to unstructured problems.
• Use a broad range of tools and techniques to extract insights from current industry or sector trends.
• Review your work and that of others for quality, accuracy and relevance.
• Know how and when to use tools available for a given situation and can explain the reasons for this choice.
• Seek and embrace opportunities which give exposure to different situations, environments and perspectives.
• Use straightforward communication, in a structured way, when influencing and connecting with others.
• Able to read situations and modify behavior to build quality relationships.
• Uphold the firm's code of ethics and business conduct.

Job Requirements and Preferences:

Basic Qualifications:

Minimum Degree Required:
Bachelor Degree

Preferred Fields of Study:
Accounting, Finance, Management Information Systems, Management Information Systems & Accounting, Computer and Information Science, Computer and Information Science & Accounting, Mathematical Statistics, Statistics, Mathematics, Economics, Economics and Finance, Economics and Finance & Technology, Business Administration/Management, Engineering

Minimum Years of Experience:
3 year(s)

Preferred Qualifications:

Preferred Knowledge/Skills:

Demonstrates thorough abilities and/or a proven record of success in roles performing on GRC and IRM programs. These projects should be targeted to enable multiple business processes and/or source data systems to drive efficiencies and reduce redundancies supporting one or more of the following functions: internal audit, compliance, enterprise risk management, operational risk management, technology risk management, third party risk management, cyber security, business resiliency, incident management, SOX (and/or other compliance frameworks), or other business programs/initiatives. In specific, the following skills are aligned with this position:

• Risk management, compliance management, and/or enterprise governance as it relates to how technologies can be and are leveraged throughout organizations' internal audit, risk and compliance functions and processes, as well as the associated benefits that can be realized;
• Integrated risk management (IRM) frameworks, especially as it relates to building a program or capabilities across an enterprise;
• Experience in designing, reengineering, optimizing, and documenting financial, operational, technology, and business requirements, processes and workflow related to any of the listed GRC functions above through stakeholder interviews, facilitated workshops, and analysis of client process documentation;
• Experience in creating, drafting, and refining core business foundational elements such as process, risk, and control frameworks related to any/all of the listed GRC functions above through stakeholder interviews, knowledge of industry leading practices and frameworks, facilitated workshops, and analysis of client process documentation;
• Deep understanding of access control, specifically role based access and inheritance of role and record based permissions:
• Experience identifying sources of data outside of GRC solutions, and designing integration approaches to share data between client and third party systems;
• Knowledge of on premise and cloud based application architecture, the differences between them, advantages for each, disadvantages for each, and how each one impacts sustainability, performance, and capacity for the GRC solutions;
• Experience with implementing GRC technology such as (but not limited to) RSA Archer, MetricStream, or ServiceNow; and,
• Knowledge of proper technical documentation techniques to capture GRC solution design and configuration to meet client SDLC requirements and satisfy client requirements.

Demonstrates thorough abilities and/or a proven record of success with performing on client projects/engagements, including the following areas:

• Defining resource requirements, project workflow, budgets, billing and collection;  
• Creating a positive work environment, monitoring workloads of team members while meeting client expectations and respecting the work-life quality of team members, leveraging diverse views and encouraging improvement and innovation, providing candid and meaningful feedback in a timely manner and keeping leadership informed of progress; and, 
• Developing and sustaining meaningful client relationships, understanding a client's business and technology in order to identify, pursue, and ultimately obtain additional consulting opportunities.

Learn more about how we work: https://pwc.to/how-we-work

PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy.

All qualified applicants will receive consideration for employment at PwC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC is proud to be an affirmative action and equal opportunity employer.

For positions based in San Francisco, consideration of qualified candidates with arrest and conviction records will be in a manner consistent with the San Francisco Fair Chance Ordinance.



The salary range for this position is: $84,000 - $202,000, plus individuals may be eligible for an annual discretionary bonus. For roles that are based in Maryland, this is the listed salary range for this position. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation and more. To view our benefits at a glance, please visit the following link: https://pwc.to/benefits-at-a-glance