Information Security Manager

Line of Service
Internal Firm Services

Industry/Sector
Not Applicable

Specialism
IFS - Risk & Quality (R&Q)

Management Level
Manager

Job Description & Summary
A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You'll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhance security of internal information and protect our firm's intellectual assets. If you are seeking an exciting career with the scope to grow your cyber security and technology skills through major change on a global scale, then NIS and PwC Technology will empower you to do so. NIS built the first global cyber security function at PwC. Our mission is to protect over 370,000 PwC professionals across 149 member firms worldwide as well as our global clients.

Our team leads the information security strategy within PwC. The overall goals for the function include the identification, tracking and mitigation of risk, as well as offering in-depth expertise to ensure credibility and confidence in the handling of client, firm, or employee data. We work closely with stakeholders to understand their business objectives to enable us to have full visibility into potential information security risks across our estate. Joining this team, you'll provide the customer centric perspective to enable PwC to deliver maximum value to the customer, the PwC Network of firms, and PwC's clients.

If you love the business side of informationsecurity,this is the place to be. Within the CISO pillar we work closely with member firm stakeholders to understand their business model and roadmap for technology. Inturn,the CISO pillar outlines the roadmap for NIS and drives engagement and adoption of central security services in line with the PwC Cyber Readiness program.

Management of relationships between NIS and the business is key to delivering the cyber readiness mission. Whether it be integrating solutions, driving operationalprocessesor providing guidance back to NIS to further enhance our strategy, CISO pillar provides the engagement andpersonal touchto enable NIS to deliver maximum value to the customer, the PwC Network of firms.



Essential Skills& Responsibilities

• The primary responsibility will be to lead and support multiple cybersecurity initiatives, including projects related to compliance, risk management, threat analysis, application security, vulnerability assessments, and regulatory adherence.
  

• Engage with Line of Service stakeholders to assess security threats/vulnerabilities and manage business risk;
  

• Work with the other NIS teams both locally,regionallyand globally to deliver the security needs specific to the firm
  

• Ability to lead and manage a team effectively. The ideal candidate should be proactive, dynamic, and self-driven, with the capability to handle challenging situations, prioritize tasks, manage and mitigate risks, and ensuretimelyclosure.
  

• Help the businesscomply withtheInformation Security Policy byleveragingyour cyber security knowledge andexpertise;
  

• Experience managing multi-function relationships throughout major transformation;
  

• Experience in a role balanced between business stakeholders and a central serviceorganization;
  

• Navigating a multifaceted, matrixorganization;andcollaboratingwith multiplestakeholders across functional and technical skillsets.
  

• Technical: Broad understanding of security technology.
  

• Business: Ability to frame threats and exposures in a business context recognized by non-technical staff and executives
  

• Domain landscape: Knowledge oftechnical security principlesand its application
  

• Experience in managing and ensuring compliance with cybersecurity regulations and frameworks, such as MAS, CSA, and other relevant industry standards.
  

• Address conflicts or issues, engaging in difficult conversationswith clients, teammembersand other stakeholders, escalating whereappropriate.
  

• Ability toleveragebusiness communication skills to inform, persuade, and teach stakeholders across a global network of member firms staff and leadership to enable effective information security activities and processes in line with the cyber readiness program
  

• Ability toprioritizerisk, manage effective teams to drive completion of activities, passionate in provide coaching and training to team members to motivate and grow the team
  

• You willpossessdeep knowledge in a specific subject matter area or technical domain related to theInformation SecurityServices function that is applied to solve business problems and deliver necessary results. The employee incorporates existing Firm knowledge, subject matter, or technicaldomainexpertiseinto work activities.
  

• Demonstrates proven skills and thorough comprehension of managing efforts within business engagement and relationship management space.
  

• Monitor workloads within the team to deliver against the requirements withinCISO Services while making sure leadershipisinformed of progress and issues.
  

• Build andmaintainrelationships across the network of firms to effectively deliver security activities on behalf of NIS
  

• Executes tasks aligned to CISO pillar with autonomy.
  
  

• Undergraduate Degree (e.g.BIT, BSc) STEM or equivalent work experience
  

• 4 - 6Yearsof progressive professional roles involving information security, ITmanagementand/or major program management.
  

• Professional certifications such as CISA or CISSP are highly preferred,demonstratingexpertisein information security, risk management, and compliance.
  
  

• Analytical: Proactive, inquisitive nature and intuitionregardingwhat questions to ask, when, and their relative significance.
  

• Be able to navigate complex environments and find solutions to reduce security risk. Innovate, think outside of theboxand build process efficiency to deliver service excellence.
  

• Business: High level understanding of PwC's business model, service offerings, and business operating environment as it pertains to the firm's threat landscape. Ability to frame threats and exposures in a business contextrecognized by non-technical staff and executives.
  

• Domain landscape: Knowledge of informationsecurityrisk and compliance principles
  

• Communication: Ability toleveragebusiness communication skills to inform, persuade, and teach stakeholders across a global network of member firms staff and leadership to enable effective information security activities and processes in line with the cyber readiness program
  
  

Required Skills

Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Azure Data Factory, Coaching and Feedback, Communication, Creativity, Cybersecurity, Cybersecurity Governance, Data Architecture, Data Archiving, Data Flow Mapping, Data Privacy Act, Embracing Change, Emotional Regulation, Empathy, Enterprise Content Management, Incident Response Plan, Inclusion, Information Rights Management (IRM), Information Security, Information Security Governance, Information Security Management System (ISMS), Intellectual Curiosity + 16 more

Desired Languages (If blank, desired languages not specified)

Travel Requirements
Up to 20%

Available for Work Visa Sponsorship
No

Government Clearance Required
No

Job Posting End Date