Manager/Senior Manager – Cyber Regulatory Strategy & Transformation

About the role

Join PwC’s Cybersecurity & Privacy team in Geneva as a Manager or Senior Manager responsible for shaping the firm’s cyber regulatory strategy and transformation services. You will work with a multidisciplinary group of specialists to help clients translate evolving cyber‑security laws into practical, resilient operating models and compliance programmes.

Key responsibilities

• Lead multidisciplinary engagements to assess the applicability and impact of regulations such as NIS2, the Cyber Resilience Act, DORA and sector‑specific Swiss and international requirements.
• Translate legal obligations into governance models, policies, control frameworks, target operating models and risk‑based implementation road‑maps.
• Design and enhance end‑to‑end compliance programmes, including regulatory inventories, control mapping, evidence management and remediation tracking.
• Conduct readiness, gap and maturity assessments and define proportionate remediation measures.
• Advise clients on required capabilities such as risk management, incident response, regulatory reporting, third‑party security, vulnerability management and secure product development.
• Facilitate workshops and briefings for boards, executive management and cross‑functional stakeholders.
• Manage engagements end‑to‑end, overseeing scope, delivery teams, budget, quality and stakeholder expectations.
• Develop client relationships and contribute to practice growth through thought leadership and collaboration across the PwC network.

Required profile

• At least five years of experience in cybersecurity governance, risk and compliance, digital regulation or information security.
• Proven ability to work with legal, compliance, risk, IT, security and product teams on complex regulatory matters.
• Strong communication skills to translate technical and regulatory concepts into clear decisions for senior stakeholders.

Required skills

• Cybersecurity governance and risk management
• Incident response and regulatory reporting
• Third‑party and supply‑chain security
• Vulnerability management
• Secure product development
• Business continuity planning