Senior Associate - Data Privacy and Compliance

At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more 

about us.

At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations. "

Role Overview 

join PwC’s Advanced Innovation and Technology Hub (AITH) as a Senior Associate to support Governance Risk and Compliance (GRC) practice across Internal Audit, Internal Controls Review, and SOX / IFC Testing engagements. The role requires strong control testing experience, stakeholder management, review capability, and deep understanding of business processes and associated risks. 

Responsibilities 

• • Execute and lead internal audit and controls testing engagements. 

  • Review work performed by team members to ensure technical accuracy, quality, and completeness. 

  • Evaluate design and operating effectiveness of controls. 

  • Manage stakeholder interactions, process-owner discussions, and engagement-level coordination. 

  • Prepare and review walkthroughs, testing workpapers, observations, and Risk and Control Matrices (RCMs). 

  • Ensure delivery aligns with engagement objectives, timelines, budgets, and quality standards. 

Mandatory skill sets:

Preferred skill sets:

• Bachelor’s degree in law, Engineering, Information Security, Computer Science, or related field. 

• Master’s degree in MBA, Law, Information Security or related field.  

• 2–6 years of experience in data privacy, compliance, or information security. 

• Strong knowledge of GDPR, DPDPA, CCPA/CPRA, and other international privacy laws. 

• Strong expertise in technical privacy controls, including encryption, pseudonymization, access management, and related security mechanisms. 

• Experience in conducting privacy assessments, gap analyses, and audits. 

• Familiarity with data governance, risk management, and IT security practices. 

• Excellent communication and stakeholder management skills. 

• Certifications such as CIPP/E, CIPM, CIPT, or equivalent are a plus. 

Years of experience required:

Education qualification: