Manager / Senior Manager - Cyber Regulatory Strategy & Transformation

About the role

PwC's Cybersecurity & Privacy advisory team in Geneva is looking for a Manager or Senior Manager to join the Cyber Regulatory Strategy & Transformation practice. You will work with cybersecurity, risk, privacy, legal and technology specialists to help organisations turn evolving cybersecurity regulation into practical strategies, resilient operating models and sustainable compliance programmes. The role supports Swiss and international clients across industries, from assessing applicability and readiness to designing and implementing compliance programmes for requirements such as NIS2, the Cyber Resilience Act (CRA), DORA and relevant Swiss and international sector-specific rules.

Key responsibilities

• Lead and deliver multidisciplinary engagements that assess the applicability and impact of cybersecurity laws across legal entities, jurisdictions, business services, products and supply chains.
• Translate regulatory obligations into governance models, policies, control frameworks, target operating models and risk-based implementation roadmaps.
• Design, establish and enhance end-to-end compliance programmes, including regulatory inventories, obligation and control mapping, evidence management, control testing, issue and remediation management, metrics, reporting and regulatory change monitoring.
• Perform regulatory readiness, gap and maturity assessments, define proportionate remediation measures and support clients through implementation, testing and independent review.
• Advise clients on capabilities required by regulatory regimes, including cybersecurity risk management, incident response, regulatory reporting, third-party and supply-chain security, vulnerability management, secure product development and business continuity.
• Facilitate workshops and briefings with boards, executives and stakeholders across Legal, Compliance, Risk, IT, Security, Product and Engineering.
• Serve as trusted advisor and key client contact, managing engagements end to end, and coach and develop team members.

Required profile

• At least five years of experience in cybersecurity governance, risk and compliance, technology or digital regulation, information security, digital resilience or a related field; consulting, Big Four, regulated or technology company experience is particularly relevant.
• Bachelor's or master's degree in cybersecurity, information security, information systems, engineering, business or a related field, or an equivalent professional qualification.
• Fluent English; German and/or French is a strong advantage.
• Experience contributing to proposals, market development and long-term client relationships.

Required skills

• Practical knowledge of cybersecurity regulatory regimes such as NIS2, CRA, DORA, FINMA requirements or comparable Swiss and international sector-specific rules.
• Proven experience turning regulatory requirements into compliance programmes, controls and operational processes.
• Familiarity with standards such as ISO/IEC 27001 and 27002, the NIST Cybersecurity Framework, CIS Controls and, where relevant, IEC 62443.
• Strong project-management, analytical, communication and presentation skills, and the ability to engage senior stakeholders.
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer or Lead Auditor, or a project-management qualification, are an advantage.