Application Security -Senior Associate
Recruiter
PwC
Listed on
17th February 2020
Location
Belfast
Type
Permanent
Start Date
ASAP
This job has now expired please search on the home page to find live IT Jobs.
A career in Information Security, within internal firm services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You'll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firm's intellectual assets.About the teamPwC are driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network. Mandated at the network level, NIS operate outside IT and are responsible for this major program initiative, from definition of the security strategy to execution of the global Cyber Readiness Program, moving from local to centralized services. Our mission is to identify, control & reduce the attack surface across the member firm network while increasing our adversaries’ cost of attack.In order to deliver the Cyber Readiness Program the NIS team is structured into the following PillarsInformation Security Risk & ComplianceCISOSecurity Architecture, Engineering, Innovation & Transformation (SAEIT)CyberStrategy & AlliancesChief of StaffNIS are building the first global cyber security function at PwC. Our mission protects 300,000 PwC members across 160 member firms worldwide as well as our global clients.If you are seeking an exciting career with the scope to grow your security skills through major change on a global scale, then NIS will empower you to do so. The SAEIT pillar within NIS is responsible for the following servicesSecurity ArchitectureSecurity EngineeringInnovationSecurity TransformationApplication SecurityAbout the roleThe Application Security team own following tasks Definition of application landscape & creation of application risk register across the PwC Network of firmsUtilisation of application security tools for scanning applications for common application security risksEngagement with development teams to articulate complex application security risksContinual engagement throughout the software development lifecycle (SDLC) to identify, track & reduce application security risks across new applicationsAssessment of application security vulnerabilities across existing application landscape. Plan & prioritise application security vulnerabilities & develop structured remediation planEngaging stakeholders in ISRC to ensure technical vulnerabilities that cannot be remediated are managed & mitigating controls are developed to reduce the risk of said vulnerability within the business environment.RequirementsAn effective SAEIT candidate will also possess the following skills2-4 years relevant experienceUndergraduate Degree (e.g., BA, BS) or equivalent experience Broad understanding of enterprise technology & how to design & build a range of security toolsKnowledge of how attack techniques are used in enterprise intrusions to gain entry, gain privilege, and ultimately accomplish a nefarious objective against a victim organization.Experience engaging business & technology stakeholders at all levels to gather long term goals & requirementsUnderstanding of how to design & build security technology solutions aligned to a global central service environmentUnderstanding of security technology at an enterprise & solution levelHands on engineering experience with enterprise security technologyExperience working to transition technology from a local focus to a central technology service organizationExperience working in a complex, matrix organizationExperience working with multiple stakeholders across functional and technical skillsetsAbout PwC
We're one of the world's leading professional services organisations. From 158 countries, we help our clients, some of the most successful organisations on the globe, as well as its most dynamic entrepreneurs and thriving private businesses, to create the value they want. We help to measure, protect and enhance the things that matter most to them.
The skills we look for in future employees
All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, ‘The PwC Professional' and are made up of five core attributes; whole leadership, technical capabilities, business acumen, global acumen and relationships.
Learn more here www.pwc.com/uk/careers/experienced/apply
Diversity
We work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool, as well as those who reflect the diverse nature of our society. And we aim to encourage a culture where people can be themselves and be valued for their strengths. Creating value through diversity is what makes us strong as a business and as an organisation with an increasingly agile workforce, we're open to flexible working arrangements where appropriate.
Learn more here www.pwc.com/uk/diversity
