Senior Manager, Cyber & Privacy

About the role

PwC Australia is looking for an experienced Senior Manager to join its Brisbane Cyber & Privacy team. The role leads client engagements at the intersection of cyber governance, risk and compliance (GRC), security transformation and implementation, helping organisations move beyond identifying gaps to designing, building and embedding stronger security capabilities. It is a hands-on consulting leadership position.

Key responsibilities

• Own delivery end to end: lead complex, sometimes multi-workstream engagements from discovery and design through implementation, transition and measurable uplift, using AI-enabled tools responsibly.
• Manage scope, project finances, milestones, risks, resourcing and quality.
• Turn cyber risk, regulatory obligations and security strategies into practical control designs, operating models, uplift roadmaps and implemented improvements.
• Work with technical specialists on cloud and platform security, identity, security operations, vulnerability management and control implementation.
• Lead workshops and steering discussions, communicate with executives and delivery teams, and act as a trusted adviser on complex cyber issues.
• Shape responses to RFPs and tenders, define scopes and statements of work, build proposals and identify follow-on opportunities.
• Manage direct reports and engagement teams, delegate, give constructive feedback and coaching, and build a culture of accountability and quality.

Required profile

• Cyber GRC, AI and transformation experience, with a track record of delivering and embedding change, not just completing assessments or recommendations.
• Broad understanding of core security concepts, AI, technologies, architectures, threats and controls, able to link business risk to technically credible solutions.
• Experience leading projects and teams, managing budgets and margins, and prioritising work.
• Ability to influence senior stakeholders, guide multidisciplinary teams and coach people at different experience levels.
• Experience supporting business development, proposals and account growth; an existing client portfolio is not required.
• Desirable: consulting background, and industry experience in financial services or energy, utilities and resources, including APRA CPS 234/CPS 230, SOCI and AESCSF; familiarity with NIST CSF, ISO 27001 and the Essential Eight is also valuable.

Required skills

• Cyber GRC, risk and control improvement, including AI-accelerated risk and control analysis, evidence review, regulatory mapping, reporting and policy and framework development.
• CISSP, CISM or comparable cybersecurity credentials.
• Commercial delivery discipline and confident leadership and communication.

What we offer

• Leadership development programs and executive coaching.
• A parental leave policy of up to 26 weeks for caregivers.
• Flexibility to choose when, where and how you work.
• A culture that values diverse perspectives, inclusion and diversity, and First Nations Prosperity.