Associate Cyber Security Consultant (GRC/Data Privacy)

About the role

In PwC's Cybersecurity and Privacy Consulting practice, our work is always evolving to respond to industry trends and management focus, and we combine our deep technical skills in response to our clients' changing needs. Over time, what we do remains closely linked with helping our clients improve the way they operate, innovate and grow, reduce costs, manage risks, leverage talent and change the way they do business. Choose a career at PwC's Cybersecurity and Privacy Consulting and enjoy an innovative environment where challenging and interesting work is part of daily life.

Key responsibilities

• Design and work on Cybersecurity framework based on business objectives and strategic imperatives of the client organization including goals, vision, mission, and operational plans
• Design and implement data protection and privacy programs for clients and support their business
• Evaluate the data protection and privacy practices of clients and conduct Privacy Impact Assessments
• Monitor processes and drive improvements in efficiency and quality of cyber-security programs
• Assist in development of workflows for transitioning strategic plans into implementation plans and operational readiness
• Facilitate strategic planning initiatives, documentation, technical roadmaps and security tool rationalization
• Develop security policies, procedures, and standards based on the security strategy and roadmap
• Review cyber security policies and processes to identify gaps in design of control based on comprehensive assessment framework
• Conduct security process implementation reviews to assess security effectiveness and reporting
• Conduct Current State Assessment of cyber security practices against the defined controls and provide recommendations for to-be state

About you

• At least 1-2 year of experience in cyber-security advisory, System Integration (SI) or Security products
• Bachelor's degree in Computer Engineering, Computer Science, Information Systems or a related field
• Knowledge of industry standard classification schemes, such as ISO27000, NIST, GDPR, TH PDPA, PCI DSS, Data Loss Prevention
• Demonstrated self leadership, problem solving, including verbal and written communication skills
• Ability to communicate clearly in both Thai and English
• Proven analytical, decision-making, and presentation skills
• High level of MS Office proficiency
• Ability to work both independently and as part of a team with professionals at all levels

About us

PwC's Cybersecurity and Privacy Consulting practice combines deep technical skills in response to clients' changing needs. Our work is closely linked with helping clients improve the way they operate, innovate and grow, reduce costs, manage risks, leverage talent and change the way they do business.