A spotlight on…PwC

Driving Cyber Resilience and Inclusive Growth in Wales


PwC, a global leader in professional services, brings deep technical and industry insights to empower organisations with greater cyber resilience.

From helping to shape a cyber security strategy that embraces AI and automation to dealing with risk reduction and assurance requests, PwC’s technical expertise is recognised as market-leading by industry technology analysts.

Over a five-year programme, PwCs investment into Wales will run to tens of millions, not including the lease and fit-out of new premises in Cardiff. With a dedicated team of over 450 highly qualified staff based in Cardiff, PwC offers market-leading technical expertise and innovative solutions.

Growth and Inclusion in Wales

PwC’s investment in Cardiff, mirroring its success in Belfast, showcases the firm’s commitment to growth and inclusive practices. The economic impact analysis indicates a significant contribution to the wider economy for each job created. PwC’s investment in Wales goes beyond business, with a focus on inclusion programs for schoolchildren, refugees, and broader community engagements across South Wales.

Targeted Growth Areas

PwC’s growth strategy in Wales includes digital transformation, cloud services, cybersecurity, and managed services. Diversity is a key business aim, recognising that teams exhibiting a diversity of backgrounds and ways of thinking are more innovative and create more value, better outcomes for clients, and deliver better business returns. The firm’s investment over the next five years, including new premises in Cardiff, underscores its dedication to economic growth in the region.

Cybersecurity Services

PwC’s proactive approach to cybersecurity addresses the evolving challenges in the digital landscape. Their services include:

  1. Proactive Cyber Defence: Organisations face many challenges when building a proactive cyber defence and detection capability. As cyber threats become more sophisticated, businesses need cyber security that not only protects the business today but provides proactive defence against new and emerging threats. Using machine learning and automation, PwC delivers data-driven defence and detection services. The focus is on providing enhanced protection and visibility into potential attacks, coupled with technical and business expertise for informed decision-making.


  1. Cyber Incident Response and Recovery: Any business can fall victim to a cyber incident or crisis. The organisations who respond and recover most quickly and successfully are those that have prepared in advance and have the expertise and structure to guide them through such exceptional circumstances. PwC provides practical advice and hands-on expertise to prepare for and respond to cyber incidents. This ensures business continuity and effective recovery efforts. To find out more visit


  1. Operational Technology Cyber Security: Cyber-attacks on operational technology are becoming more complex and more prevalent. PwC helps organisations stay ahead of threats, maintain operational continuity, and strengthen cybersecurity for greater resilience.

A Day in the Life of a PwC Ethical Hacker

As society’s dependence on technology increases and cyber threats evolve, our approach to security also needs to change. To succeed in a digital world, cyber security needs to be embedded in everything. From websites, to apps, to the internet of things (e.g., cars, smart bulbs, and smart appliances). Think of a car that allows remote attackers to control it, or a banking app that allows unauthorised third parties to transfer funds, or a medical device that handles patients’ data insecurely.

At PwC UK, the Ethical Hacking team plays a crucial role in embedding cybersecurity across diverse digital landscapes, from websites and apps to the internet of things (IoT). Here’s a glimpse into a day in the life of a PwC Ethical Hacker:

“Working at PwC has enabled me to engage with a wide range of organisations from the financial sector to the educational sector, to those who work with operational technology (OT). This means that I have a wide range of skills that allows me to test simple webapps, online banking platforms, IT infrastructure, Security controls and OT environments.

When tasked with assessing an organisation’s external perimeter, as an Ethical Hacker I take several steps. I start by meticulously researching open-source information, identify key targets, and prepare tooling tailored to the organisation’s profile. I then find the best way to leverage the information to gain access to the organisation’s environment. The testing process may involve exploiting external-facing services, spear-phishing key individuals, or identifying weaknesses in people controls.

Now one might ask, how does this help organisations? This is where the reporting comes in. While carrying out the above process, I document every step that I take, and then share these steps with the organisation so that they can close gaps in their security. For example, if we exploited one of their external-facing services, the organisation would need to patch that service (technology) and implement a better vulnerability management programme (process). If, however, the chink in the armour was a people control, we’d support the organisation to train their employees to spot and take action to address the weakness.

Identifying vulnerabilities allows organisations to fix them. As a result, products we use daily are more secure. Through our research and testing, we really do help build a secure digital society.”

Future Growth Plans

PwC chose to base its Ethical Hacking Centre of Excellence in Cardiff because of the depth of the talent pool and the opportunities to partner with high-performing colleges and universities. The Cyber Security and Technology MSc programme that PwC developed with Cardiff University is an example of where partnerships in Wales are so attractive; they were able to identify a skills gap and work with a local education provider to fill it.

In broader terms, PwC’s expansion in Wales is evident with the announcement of 300 new jobs, not only in Cyber but across various lines of service and managed services. The firm’s commitment to growth and inclusivity positions PwC as a key player in shaping the future economic landscape of Wales.

The firm plans to leverage the talent pool and partnerships with colleges and universities to continue growing its Cyber presence in Wales.

Find out more about PwC

You might also like...

Sign up to our newsletter

Stay up-to-date on the latest cybersecurity trends and technologies by joining the Cyber Innovation Hub newsletter today.

You can unsubscribe at any time by clicking the link in the footer of our emails. For information about our privacy practices, please visit our website: privacy policy We use Mailchimp as our marketing platform. By clicking below to subscribe, you acknowledge that your information will be transferred to Mailchimp for processing. Learn more about Mailchimp's privacy practices here.