Cyber Strategy and Resilience Senior Associate

About the role

PwC is hiring a Cyber Strategy, Risk and Resilience Senior Associate based in Croatia. The role sits within the Strategy and Resilience tower of the PwC CEE Cyber Practice, which has more than 200 cybersecurity professionals across Central and Eastern Europe. You will deliver consulting work for clients across CEE and remotely support engagements in the rest of Europe, the United States and the Middle East, with occasional business travel.

Key responsibilities

• Assess cybersecurity and information security controls against EU legislation (NIS2, DORA, Cyber Resilience Act) and national requirements, and identify compliance gaps and control weaknesses.
• Produce traceable, management-ready findings, recommendations and deliverables that act as a first quality filter before Manager or Partner review.
• Support the development of cybersecurity governance, risk and compliance frameworks, policies and procedures.
• Support cyber strategy and resilience engagements, including roadmaps, maturity assessments, governance and operating models, third-party risk, business continuity and crisis management.
• Use approved enterprise AI tools to speed up research and document review, then critically evaluate the output and flag unsupported conclusions.
• Plan and deliver workstreams with multidisciplinary teams, review junior colleagues' work and help coordinate day-to-day delivery.

Required profile

• University degree in ICT, information systems, computer science, information or cybersecurity, or a related discipline.
• 3-5 years of experience in cyber consulting, cyber risk, governance, resilience, technology risk, IT audit, internal controls or regulatory compliance, at Senior Associate or equivalent level.
• Hands-on experience in regulatory gap assessments and risk or control reviews, plus at least one of: cyber strategy or roadmaps, maturity assessments, governance or target operating models, third-party risk, business continuity or crisis management, operational resilience or remediation planning.
• Professional proficiency in written and spoken Croatian and English.

Required skills

• Strong working knowledge of cyber risk, governance and resilience requirements, including NIS2, DORA, the Cyber Resilience Act, ISO/IEC 27001 and NIST CSF.
• Ability to validate evidence, map requirements and controls, and write clear, client-ready reports.
• Experience with recognised frameworks such as ISO/IEC 27001, NIST CSF, SOC 2 is an advantage; CISM, CRISC, CISA, CISSP, ISO 27001 Lead Implementer/Auditor or CBCI/CBCP is also an advantage.

What we offer

• International projects across CEE, Europe and the EMEA region.
• Structured learning, company training and career development opportunities.
• Access to PwC's network knowledge, methodologies, tools and a supportive, team-oriented environment.
• Competitive compensation and a comprehensive benefits package.