Senior Associate - Business Information Security Officer - London


Premium Job From PwC

Recruiter

PwC

Listed on

17th February 2020

Location

London

Type

Permanent

Start Date

ASAP

This job has now expired please search on the home page to find live IT Jobs.

Who we arePwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network. Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to the execution of the global Cyber Readiness Program, moving from local to globally-provided services. Our mission is to identify, control, and reduce the attack surface across the member firm network while increasing our adversaries’ cost of attack.In order to deliver the Cyber Readiness Program, the NIS team is structured into the following PillarsInformation Security Risk and Compliance (ISRC)Chief Information Security Office (CISO)Security Architecture, Engineering, Innovation and Transformation (SAEIT)Cyber Security ServicesStrategy and AlliancesChief of StaffNIS is building the first global cyber security function at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide, as well as our global clients. If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so. The CISO pillar within NIS is responsible for the following servicesEngagementGovernanceMeasurementService InterfaceIf you love the business side of information security this is the place to be. Within CISO pillar we work closely with member firm stakeholders to understand their business model and roadmap for technology. In turn CISO pillar outline the roadmap for NIS and drive engagement and adoption of central security services in line with the PwC Cyber Readiness program. Management of relationships between NIS and the business is key to delivering the cyber readiness mission. Whether it be integrating solutions, driving operational processes or providing guidance back to NIS to further enhance our strategy, CISO pillar provide the engagement and personal touch to enable NIS to deliver maximum value to the customer, the PwC Network of firms.Scope of Responsibility The Business Information Security Officers (BISO) focus upon 4 core areasEngagementNIS Service InterfaceMeasurementGovernanceEach of these areas work together to successfully support member firm Information Security Officers (ISOs) and their staffs in the implementation of the PwC Information Security Policy (ISP).Core skills within the BISO Services Team consist ofConduct analysis of Line of Service needs in order to make appropriate decisions for the implementation of NIS global security strategy;Engage with Line of Service stakeholders to assess security threats/vulnerabilities and manage business risk;Facilitate line of service support from Security Architecture, Engineering, Innovation, and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;Assess service availability, adoption rates, and maturity to manage risk to business programs and processes;Govern lines of service for compliance with PwC’s Information Security Policy (ISP) and legal/regulatory frameworks; andEngage with Global IT and Applications to review security controls against ISP.Strategic and Technical Orientation Individuals selected for this role are expected to have both extensive knowledge and managerial know-how related to the following aspects of the CISO pillar skills matrixExperience managing multi-function relationships throughout major transformation;Understanding of security technology;Experience in a role balanced between business stakeholders and a central service organization;Navigating a multifaceted, matrix organization; andCollaborating with multiple stakeholders across functional and technical skillsets.
Who we are looking for2 - 4 Years’ of demonstrable professional roles involving information security, IT management and/or major program managementAnalytical Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.Technical Broad understanding of security technology.Business High level understanding of PwC’s business model, service offerings, and business operating environment as it pertains to the firm’s threat landscape. Ability to frame threats and exposures in a business context recognized by non-technical staff and executives.Domain landscape Knowledge of assurance and technical security principlesCommunication Ability to leverage business communication skills to inform, persuade, and teach stakeholders across a global network of member firms’ staff and leadership to enable effective information security activities and processes in line with the cyber readiness program Percentage of travel time 0-20%
About PwC

We're one of the world's leading professional services organisations. From 158 countries, we help our clients, some of the most successful organisations on the globe, as well as its most dynamic entrepreneurs and thriving private businesses, to create the value they want. We help to measure, protect and enhance the things that matter most to them.

The skills we look for in future employees

All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, ‘The PwC Professional' and are made up of five core attributes; whole leadership, technical capabilities, business acumen, global acumen and relationships.

Learn more here www.pwc.com/uk/careers/experienced/apply

Diversity

We work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool, as well as those who reflect the diverse nature of our society. And we aim to encourage a culture where people can be themselves and be valued for their strengths. Creating value through diversity is what makes us strong as a business and as an organisation with an increasingly agile workforce, we're open to flexible working arrangements where appropriate.

Learn more here www.pwc.com/uk/diversity

You are currently using an outdated browser.

Please consider using a modern browser such as one listed below: