Overview
About Risk Services
Our Risk Services Practice provides an invaluable safeguard in today’s complex operating environment with insights and independent assurance. We work with clients to deliver business control to help them to protect and strengthen every aspect of their business from people to performance, systems to strategy, business plans to business resilience. We help clients manage, mitigate and control risks from potential cybersecurity breaches to possible breaks in the supply chain. We assess and prepare businesses by looking into their technology, finance, data analytics, regulatory requirements, data security and privacy, internal audit, and the third parties our clients rely on, to help clients deliver quality results and meet their strategic objectives.
Key Responsibilities
As an Associate, your responsibilities include but are not limited to:
- Collaborate with the team to deliver comprehensive cybersecurity and data protection services to clients.
- Support assessments of clients’ data protection practices against local regulations (such as PDPA in Singapore) and international standards (e.g., GDPR, ISO 27701, ISO27001, NIST Cybersecurity and Privacy frameworks).
- Assist in performing gap analyses and compliance assessments, contributing to detailed reporting and actionable recommendations.
- Assist in the planning and execution of technology and cybersecurity audits.
- Collaborate with clients’ teams to gather necessary audit evidence and documentation, evaluating the design and operating effectiveness of IT controls.
- Identify potential risks, vulnerabilities, and areas for improvement within IT systems and processes, preparing clear and concise audit reports, including findings and recommendations for management.
- Conducting compliance reviews against technology standards and regulations such as CSA Cybersecurity Codes of Practice (CSA CcoP), ISO27001, and others.
- Engage with various tools and technologies used in data security, privacy management, and risk assessment, participating in cyber simulation exercises.
- Collaborate across multidisciplinary teams, assisting with the establishment and uplift of data and cybersecurity measures for our clients and supporting projects aimed at enhancing clients’ cybersecurity posture.
What We Are Looking For
- Final-year student or recent graduate in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or related disciplines from reputable local or overseas universities.
- Strong fundamentals in information technology, networking principles, and cybersecurity concepts.
- Basic understanding of network and cryptography principles, and data loss prevention (DLP) technologies.
- Familiarity with cloud security principles and tools (e.g., Microsoft 365, AWS, Azure), common security testing tools (e.g., Kali Linux, Burp Suite, Nmap, Metasploit, Covenant, BloodHound) and database security fundamentals.
- Knowledge of data privacy principles, cybersecurity frameworks, and regulations, along with understanding common vulnerability classes (e.g. OWASP Top 10), exploitation techniques, and defensive concepts.
- Working knowledge of at least one scripting language (e.g., Python, Bash, PowerShell) – the ability to automate and adapt is a plus.
- Strong analytical thinking, critical thinking, and problem-solving skills; ability to explain highly technical concepts to non-technical stakeholders.
- Excellent interpersonal and communication skills.
- Ability to work collaboratively in a team environment, showing initiative and eagerness to learn.
- Offensive security certifications such as OSCP, CRT, CRTO, CEH, eJPT, eCPPT, or similar (or working towards them).
- Genuine passion for offensive security with active participation in CTFs and contributions to open-source offensive security tools.
Application Notes
- Please indicate your first-choice role and, where applicable, a second-choice role, based on your skills, interests, and career aspirations.
- Only shortlisted candidates will be notified due to the high volume of applications.
- Kindly upload both your resume and academic transcript/degree audit in PDF format
- Have questions? Get in touch with us at sg_graduate_recruitment@pwc.com
There have been reports of scammers impersonating PwC HR professionals contacting individuals about fraudulent job opportunities using non-PwC domain email addresses and an overseas number. Please note that genuine communications from our HR team will only come from “@pwc.com” email addresses.
At PwC, our purpose is to build trust in society and solve important problems. We are committed to delivering quality in assurance, advisory and tax services. Find out more and tell us what matters to you by visiting us at www.pwc.com/sg. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity.
Explore more:
Job ID: 741222WD
About PwC Singapore
At PwC, our purpose is to build trust in society and solve important problems - this is at the core of everything we do from the value we provide to our clients and society to the decisions we make as a corporate.
Our services started with audit and assurance over a century ago. As times change and the issues faced by businesses and individuals evolved, we have developed specialised capabilities in tax, advisory and consulting to help you address emerging new challenges across focus areas like digital transformation, cyber security and privacy, data, sustainability, mergers and acquisitions, and more.
In Singapore, we have more than 3,500 partners and staff to help resolve complex issues and identify opportunities for public, private and government organisations to progress. As part of the PwC network of more than 284,000 people in 155 countries, we are among the leading professional services networks in the world focusing on helping organisations and individuals create the value they are looking for.
