Senior Consultant | Technology GRC with German

The Technology GRC & Internal Audit team at PwC helps organisations design, implement, and optimise governance, risk, and compliance frameworks with a strong emphasis on technology enablement. They deliver enterprise risk management programmes, map complex process landscapes, deploy GRC platforms (including SAP GRC, Workiva, SAP Signavio), and run technology-focused internal audit engagements. The team works with C-suites, Boards, and risk leaders across industries to make GRC practical, data-driven, and future-ready.

• Minimum 3–4 years of experience in internal audit, risk management, GRC advisory, or compliance
• Fluency in English and German for confident verbal and written communication with stakeholders
• Knowledge of GRC frameworks and internal audit standards including SOX, COSO ERM, COBIT, ISO 31000, ISO 27001, and IIA Standards
• Hands-on experience with process mapping, control environment design, and testing
• Strong relationship-building, stakeholder management skills, analytical thinking, attention to detail, and organisational abilities
• Demonstrated knowledge and use of new technologies and AI-based tools such as task automation, information analysis, and content creation

• Deliver internal audit and advisory engagements with a focus on IT General Controls, business process controls, and responsible AI, from planning through reporting
• Design and implement Enterprise Risk Management (ERM) frameworks including risk identification, assessment, appetite setting, and Board-level reporting
• Map and optimise business and control processes using structured methodologies such as BPMN, control matrices, and RACI
• Advise clients on the configuration and deployment of GRC technology platforms
• Author policies, procedures, instructions, and methodologies tailored to client environments
• Manage a team of 2–3 consultants, plan workloads, provide feedback, ensure quality of deliverables, and contribute to team growth by co-developing internal tools, methodologies, and knowledge-sharing initiatives