Manager / Senior Manager - Cyber Regulatory Strategy & Transformation

About the role

PwC Switzerland invites you to join its Cybersecurity & Privacy team as Manager or Senior Manager in Cyber Regulatory Strategy & Transformation. You will work with cybersecurity, risk, privacy, legal and technology specialists to help organisations turn evolving cybersecurity regulation into practical strategies, resilient operating models and sustainable compliance programmes. The role shapes and grows the firm's cybersecurity regulation and compliance offering.

Key responsibilities

• Lead and deliver multidisciplinary engagements that assess the applicability and impact of cybersecurity laws across legal entities, jurisdictions, business services, products and supply chains.
• Translate regulatory obligations into governance models, policies, control frameworks, target operating models and risk-based implementation roadmaps.
• Design, establish and enhance end-to-end compliance programmes, including regulatory inventories, obligation and control mapping, evidence management, control testing, issue and remediation management, metrics, reporting and regulatory change monitoring.
• Perform regulatory readiness, gap and maturity assessments, define proportionate remediation measures and support clients through implementation, testing and independent review.
• Advise clients on capabilities required by regulatory regimes, including risk management, incident response, regulatory reporting, third-party and supply-chain security, vulnerability management, secure product development and business continuity.
• Facilitate workshops and briefings with boards, executives and stakeholders across Legal, Compliance, Risk, IT, Security, Product and Engineering.
• Serve as trusted advisor and key client contact, managing engagements end to end, and coach and develop team members.

Required profile

• At least five years of experience in cybersecurity governance, risk and compliance, technology or digital regulation, information security, digital resilience or a related field.
• Experience in consulting, a Big Four firm, a regulated organisation or a technology or product company is particularly relevant.
• Bachelor's or master's degree in cybersecurity, information security, information systems, engineering, business or a related field, or an equivalent professional qualification.
• Fluent English; German and/or French is a strong advantage.

Required skills

• Practical knowledge of regimes such as NIS2, the Cyber Resilience Act, DORA, FINMA requirements or comparable Swiss and international sector-specific requirements.
• Proven experience turning regulatory requirements into compliance programmes, controls and operational processes.
• Familiarity with standards such as ISO/IEC 27001 and 27002, the NIST Cybersecurity Framework, CIS Controls and, where relevant, IEC 62443.
• Project-management, analytical, communication and presentation skills, and a commercial mindset with proposal and client relationship experience.