Cybersecurity associate private _ roma

PwC Italy is expanding its Cybersecurity & Privacy team and seeks a professional with at least one year of experience in cybersecurity, information security and data protection projects.

In this role, you will support private sector organizations, focusing on cybersecurity and privacy governance, system implementation, risk management, privacy by design, and security culture and awareness.

• Support private sector clients in areas such as Cybersecurity and Privacy Governance.
• Define, implement, and maintain Information Security Management Systems (SGSI) and Privacy Management Systems (SGP).
• Carry out Security & Privacy Risk Management activities.
• Conduct data protection impact assessments and manage processing registries in compliance with GDPR, Legislative Decree 2003/196 and subsequent provisions.
• Integrate Privacy & Security by Design into digital transformation projects.
• Promote Data Protection and Security Culture & Awareness within client organizations.

• At least 1 year of experience in cybersecurity, information security and data protection projects.
• Knowledge of international standards and frameworks such as ISO27001, ISO27701, ISO22301, NIST, and the national cyber security framework.
• Understanding of national and EU cyber security regulations (NIS Directive, related decrees) and data protection laws (GDPR, Legislative Decree 2003/196, Garante provisions).
• Possession of certifications such as ISO27001 or ISO22301 is a plus.
• Fluent in English (written and spoken).
• Strong problem‑solving skills and an innovative mindset for complex projects.
• Team‑working abilities and a positive work environment.

• Resolve complex, functional and innovative solutions.
• Goal‑oriented and passionate.
• Excellent team‑worker, fostering a stimulating and positive work environment.

• Accepting Feedback
• Active Listening
• Agile Methodology
• Azure Data Factory
• Communication
• Cybersecurity
• Cybersecurity Framework
• Cybersecurity Policy
• Cybersecurity Requirements
• Cybersecurity Strategy
• Emotional Regulation
• Empathy
• Encryption Technologies
• Inclusion
• Intellectual Curiosity
• Managed Services
• Optimism
• Privacy Compliance
• Regulatory Response
• Security Architecture
• Security Compliance Management
• Security Control
• Security Incident Management
• Security Monitoring

• English – Fluent (written and spoken)