Risk Services - Technology Risk Management Associate (July 2027 Intake)

About Risk Services 

Our Risk Services Practice provides an invaluable safeguard in today’s complex operating environment with insights and independent assurance. We work with clients to deliver business control to help them to protect and strengthen every aspect of their business from people to performance, systems to strategy, business plans to business resilience. We help clients manage, mitigate and control risks from potential cybersecurity breaches to possible breaks in the supply chain. We assess and prepare businesses by looking into their technology, finance, data analytics, regulatory requirements, data security and privacy, internal audit, and the third parties our clients rely on, to help clients deliver quality results and meet their strategic objectives. 

Key responsibilities 

As an Associate, your responsibilities include but are not limited to: 

• Execute audits and assessments on cybersecurity, IT systems and infrastructure and processes   

• Collaborate with stakeholders such as clients and managers to identify opportunities to improve their key controls across cybersecurity, business and technology processes  

• Provide assurance and advisory related services through all major milestones of the sales and delivery lifecycles including identification, proposal development, planning, fieldwork, reporting and debrief processes 

• Work on specific projects to substantially improve and evolve the capability and quality of the processes, deliverables and thought leadership  

• Provide coaching and/or conduct training to junior staff to develop communication, analytical and technical skills 

What we are looking for 

• Final year students in Business, Engineering, Computer Science, Information Technology (IT) or related disciplines with IT focus or experience in IT Audit and Risk/ Control experience 

• Demonstrated track record in leading engagements within a professional services or consulting environment, combined with ability to work in teams effectively 

• Strong verbal and written communication skills 

• Good presentation skills, both oral and written 

• Able to work in a fast-paced environment 

• Good analytical, organizational, and conceptual skills 

• Excellent soft skills and able to manage stakeholders across multiple disciplines 

• Excellent project management skills and a demonstrated ability to follow through and complete tasks within tight deadlines 

• Experience in management and/or assessment of adequacy of controls over technology activities at financial institutions is preferred.  

• Familiar with regulatory requirements such as MAS Notices and Guidelines related to technology, cyber security and outsourcing risk management etc. is a plus 

• Experience in cybersecurity processes such as vulnerability and threat management, patch management and identity and access management is a plus 

• Ability to provide recommendations, approaches and good industry practices  

• Experience in providing regular communication and preparing reports and presentations for clients and senior stakeholders 

• Good interpersonal skills to successfully interact with internal and external stakeholders such as clients, managers and team members 

• CISA, CISM, CISSP, PMP or other professional certification is preferred 

Application Notes 

• Please indicate your first-choice role and, where applicable, a second-choice role, based on your skills, interests, and career aspirations. 

• Only shortlisted candidates will be notified due to the high volume of applications. 

• Kindly upload both your resume and academic transcript/degree audit in PDF format 

• Have questions? Get in touch with us at [email protected] 

There have been reports of scammers impersonating PwC HR professionals contacting individuals about fraudulent job opportunities using non-PwC domain email addresses and an overseas number. Please note that genuine communications from our HR team will only come from "@pwc.com" email addresses.