Risk Quality - Information Security Analyst- Associate - UAE

Line of Service

Internal Firm Services

Industry / Sector

Not Applicable

Specialism

IFS Risk & Quality (R&Q)

Management Level

Associate

Job Description & Summary

PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network.

Mandated at the network level Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative from definition of the security strategy to the of the global Cyber Readiness Program moving from local to globallyprovided services.

Our mission is to identify control and reduce the attack surface across the

member firm network while increasing our adversaries cost of attack.

In order to deliver the Cyber Readiness Program the NIS team is structured into the following Pillars :

Information Security Risk and Compliance (ISRC)

Chief Information Security Office (CISO)

Security Architecture Engineering Innovation and Transformation (SAEIT)

Cyber Security Services

Strategy and Alliances

Chief of Staff

NIS is building the first global cyber security function at PwC. Our mission protects 223000 PwC members across 157 member firms worldwide as well as our global clients.

If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale then NIS will empower you to do so.

CISO pillar within NIS is responsible for the following services :

Engagement

Governance

Measurement

Service Interface

If you love the business side of information security this is the place to be. Within CISO pillar we work closely with member firm stakeholders to understand their business model and roadmap for turn CISO pillar outline the roadmap for NIS and drive engagement and adoption of central security services in line with the PwC Cyber Readiness program. Management of relationships between NIS and the business is key to delivering the cyber readiness mission. Whether it be integrating solutions driving operational processes or providing guidance back to NIS to further enhance our strategy CISO pillar provide the engagement and personal touch to enable NIS to deliver maximum value to the customer the PwC Network of firms.

The CISO Services Team is made up of 4 core areas :

CISO Engagement

NIS Service Interface

CISO Measurement

CISO Governance

Each of these areas work together to successfully support member firm Information Security Officers (ISOs) and their staffs in the implementation of the PwC Information Security Policy (ISP).

Core skills within the CISO Services Team consist of

• Conduct analysis of member firm needs in order to make appropriate decisions for the implementation of NIS global security strategy;
• Engage with member firm stakeholders to assess security threats / vulnerabilities and manage business risk;
• Facilitate member firm support from Security Architecture Engineering Innovation and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;
• Assess service availability adoption rates and maturity to manage risk to business programs and processes;

Strategic and Technical Orientation / Job Content

• Experience managing multifunction relationships throughout major transformation;
• Understanding of security technology;
• Experience in a role balanced between business stakeholders and a central service organization;
• Navigating a multifaceted matrix organization; and
• Collaborating with multiple stakeholders across functional and technical skillsets.

Range of Impact

A 1E employee possesses knowledge in a specific subject matter area or technical domain related to the CISO Services function. 1E staff evaluate circumstances and when appropriate independently make recommendations to determine the best courses of action to execute strategy and influence others through interactions with coworkers within the CISO Services team.

Demonstrates some abilities in managing efforts within business engagement and relationship management space.

Contribute positively to a working environment by building solid relationships with team members.

Build and maintain relationships across the network of firms to effectively deliver security activities on behalf of NIS

Executes tasks aligned to CISO pillar with autonomy.

Job Objectives and Key Metrics

Responsibilities :

Manage relationships across PwC member firms

Map existing member firm services to NIS service catalogue

Define roadmap for integration of member firm services into NIS shared services

Provide consultancy throughout service integration

Metrics

Capture metrics aligned to service integration and service adoption

Drive quality of service to our stakeholders

Education Level

High school diploma or G.E.D.

Preferred

Undergraduate Degree (e.g. BA BS) in Information technology or field of study applicable to the role and / or completed certifications involving cybersecurity

Experience Level

1 3 Years of progressive professional roles involving information security IT management and / or major program management.

Other Details

An effective CISO pillar candidate will also possess the following skills :

Analytical nature and intuition regarding what questions to ask when and their relative significance.

Technical

Broad understanding of security technology.

Business

High level understanding of PwCs business model service offerings and business operating environment as it pertains to the firms threat landscape. Ability to frame threats and exposures in a business context recognized by nontechnical staff and executives.

Domain landscape

Knowledge of assurance and technical security principles

Communication

Ability to leverage business communication skills to inform persuade and teach stakeholders across a global network of member firms staff and leadership to enable effective information security activities and processes in line with the cyber readiness program

Required Skills

Accepting Feedback Accepting Feedback Active Listening Agile Methodology Azure Data Factory Communication Cybersecurity Cybersecurity Framework Cybersecurity Policy Cybersecurity Requirements Cybersecurity Strategy Emotional Regulation Empathy Encryption Technologies Inclusion Intellectual Curiosity Managed Services Optimism Privacy Compliance Regulatory Response Security Architecture Security Compliance Management Security Control Security Incident Management Security Monitoring 3 more

Optional Skills

Accepting Feedback Accepting Feedback Active Listening Agile Methodology Azure Data Factory Communication Cybersecurity Cybersecurity Framework Cybersecurity Policy Cybersecurity Requirements Cybersecurity Strategy Emotional Regulation Empathy Encryption Technologies Inclusion Intellectual Curiosity Managed Services Optimism Privacy Compliance Regulatory Response Security Architecture Security Compliance Management Security Control Security Incident Management Security Monitoring 3 more

Travel Requirements

Available for Work Visa Sponsorship

Yes

Government Clearance Required

Yes

Required Experience

IC

Key Skills

IT Experience,Splunk,IDS,Cybersecurity,FIPS,PCI,NIST Standards,Information Security,Encryption,FISMA,RMF,Siem

Employment Type

Full-Time

Experience

years

Vacancy

1