Employer Active
Job Alert
You will be updated with latest job alerts via emailJob Alert
You will be updated with latest job alerts via emailLine of Service
Internal Firm ServicesIndustry/Sector
Not ApplicableSpecialism
IFS Risk & Quality (R&Q)Management Level
AssociateJob Description & Summary
PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network.The CISO Services Team is made up of 4 core areas:
CISO Engagement
NIS Service Interface
CISO Measurement
CISO Governance
Each of these areas work together to successfully support member firm Information Security Officers (ISOs) and their staffs in the implementation of the PwC Information Security Policy (ISP).
Core skills within the CISO Services Team consist of:
Conduct analysis of member firm needs in order to make appropriate decisions for the implementation of NIS global security strategy;
Engage with member firm stakeholders to assess security threats/vulnerabilities and manage business risk;
Facilitate member firm support from Security Architecture Engineering Innovation and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;
Assess service availability adoption rates and maturity to manage risk to business programs and processes;
Govern member firms for compliance with PwCs Information Security Policy (ISP) and legal/regulatory frameworks; and
Engage with Global IT and Applications to review security controls against ISP.
Strategic and Technical Orientation / Job Content:
Individuals selected for this role are expected to have both extensive knowledge and managerial knowhow related to the following aspects of the CISO pillar skills matrix:
Experience managing multifunction relationships throughout major transformation;
Understanding of security technology;
Experience in a role balanced between business stakeholders and a central service organization;
Navigating a multifaceted matrix organization; and
Collaborating with multiple stakeholders across functional and technical skillsets.
Range of Impact:
A 1E employee possesses knowledge in a specific subject matter area or technical domain related to the CISO Services function. 1E staff evaluate circumstances and when appropriate independently make recommendations to determine the best courses of action to execute strategy and influence others through interactions with coworkers within the CISO Services team.
Demonstrates some abilities in managing efforts within business engagement and relationship management space.
Contribute positively to a working environment by building solid relationships with team members.
Build and maintain relationships across the network of firms to effectively deliver security activities on behalf of NIS
Executes tasks aligned to CISO pillar with autonomy.
Job Objectives and Key Metrics:
Responsibilities:
Manage relationships across PwC member firms
Map existing member firm services to NIS service catalogue
Define roadmap for integration of member firm services into NIS shared services
Provide consultancy throughout service integration
Metrics:
Capture metrics aligned to service integration and service adoption
Drive quality of service to our stakeholders
Education Level:
Required: High school diploma or G.E.D.
Preferred: Undergraduate Degree (e.g. BA BS) in Information technology or field of study applicable to the role and/or completed certifications involving cybersecurity
Experience Level:
1 3 Years of progressive professional roles involving information security IT management and/or major program management.
Other Details:
An effective CISO pillar candidate will also possess the following skills:
Analytical: Inquisitive nature and intuition regarding what questions to ask when and their relative significance.
Technical: Broad understanding of security technology.
Business: High level understanding of PwCs business model service offerings and business operating environment as it pertains to the firms threat landscape. Ability to frame threats and exposures in a business context recognized by
nontechnical staff and executives.
Domain landscape: Knowledge of assurance and technical security principles
Communication: Ability to leverage business communication skills to inform persuade and teach stakeholders across a global network of member firms staff and leadership to enable effective information security activities and processes
in line with the cyber readiness program
Education (if blank degree and/or field of study not specified)
Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank certifications not specified)
Required Skills
Optional Skills
Accepting Feedback Accepting Feedback Active Listening Agile Methodology Azure Data Factory Communication Cybersecurity Cybersecurity Framework Cybersecurity Policy Cybersecurity Requirements Cybersecurity Strategy Emotional Regulation Empathy Encryption Technologies Inclusion Intellectual Curiosity Managed Services Optimism Privacy Compliance Regulatory Response Security Architecture Security Compliance Management Security Control Security Incident Management Security Monitoring 3 moreDesired Languages (If blank desired languages not specified)
Travel Requirements
0Available for Work Visa Sponsorship
YesGovernment Clearance Required
YesJob Posting End Date
Required Experience:
IC
Full-Time