Line of Service
Internal Firm Services
Industry/Sector
Not Applicable
Specialism
IFS - Internal Firm Services - Other
Management Level
Senior Manager
Job Description & Summary
PwC is driving major change across information and cyber security by building
a centralized model to provide security services across the entire member firm
network.
Mandated at the network level, Network Information Security (NIS) operates
outside Information Technology (IT) and is responsible for this major program
initiative, from definition of the security strategy to the execution of the
global Cyber Readiness Program, moving from local to globally-provided
services.
Our mission is to identify, control, and reduce the attack surface across the
member firm network while increasing our adversaries' cost of attack.
In order to deliver the Cyber Readiness Program, the NIS team is structured
into the following Pillars:
NIS is building the first global cyber security function at PwC. Our mission
protects 223,000 PwC members across 157 member firms worldwide, as well as our
global clients.
If you are seeking an exciting career with the scope to grow your cyber
security skills through major change on a global scale, then NIS will empower
you to do so.
The CISO pillar within NIS is responsible for the following services:
* Engagement
* Governance
* Measurement
* Service Interface
If you love the business side of information security this is the place to be.
Within CISO pillar we work closely with member firm stakeholders to understand
their business model and roadmap for technology. In turn CISO pillar outline
the roadmap for NIS and drive engagement and adoption of central security
services in line with the PwC Cyber Readiness program. Management of
relationships between NIS and the business is key to delivering the cyber
readiness mission. Whether it be integrating solutions, driving operational
processes or providing guidance back to NIS to further enhance our strategy,
CISO pillar provide the engagement and personal touch to enable NIS to deliver
maximum value to the customer, the PwC Network of firms.
The Business Information Security Officers (BISO) focus upon 4 core areas:
* Engagement
* NIS Service Interface
* Measurement
* Governance
Each of these areas work together to successfully support member firm
Information Security Officers (ISOs) and their staffs in the implementation of
the PwC Information Security Policy (ISP).
Core skills within the BISO Services Team consist of:
* Conduct analysis of Line of Service needs in order to make appropriate decisions for the implementation of NIS global security strategy;
* Engage with Line of Service stakeholders to assess security threats/vulnerabilities and manage business risk;
* Facilitate line of service support from Security Architecture, Engineering, Innovation, and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;
* Assess service availability, adoption rates, and maturity to manage risk to business programs and processes;
* Govern lines of service for compliance with PwC's Information Security Policy (ISP) and legal/regulatory frameworks; and
* Engage with Global IT and Applications to review security controls against ISP.
Strategic and Technical Orientation / Job Content:
Individuals selected for this role are expected to have both extensive
knowledge and managerial know-how related to the following aspects of the CISO
pillar skills matrix:
* Experience managing multi-function relationships throughout major transformation;
* Understanding of security technology;
* Experience in a role balanced between business stakeholders and a central service organization;
* Navigating a multifaceted, matrix organization; and
* Collaborating with multiple stakeholders across functional and technical skillsets.
Range of Impact:
* A 4E Level employee possesses deep understanding of information security business practices applied in the support of and integration with key business and strategic priorities. The employee will contribute new intellectual capital through deep knowledge and direct professional experience in a related subject matter area and/or technical domain within the BISO Services team. The candidate should possess the ability to translate BISO strategy by leading and/or managing others and performing work with significant independence, and will be influential both internally and externally through building and leading a large team or complex project, or multiple teams or projects, within the sub-pillar team.
* Possesses a proven track record of success in managing efforts within business engagement and relationship management space.
* Building and maintaining complex programs while supervising teams to execute against overall strategy.
* Build and maintain relationships across the lines of service to effectively deliver security activities on behalf of NIS.
* Executes tasks aligned to CISO pillar with autonomy.
Responsibilities:
* Manage relationships across PwC Lines of Service
* Map existing Line of service risks to NIS service catalogue
* Provide consultancy throughout service integration
Metrics:
* Capture metrics aligned to service integration and service adoption
* Drive quality of service to our stakeholders
Education Level:
Required: High school diploma or G.E.D.
Preferred: Undergraduate Degree (e.g., BA, BS) in Information technology or
field of study applicable to the role and/or completed certifications
involving cybersecurity
Experience Level:
4 - 6 Years' of progressive professional roles involving information security,
IT management and/or major program management.
Other Details:
An effective BISO candidate will also possess the following skills:
* Analytical: Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.
* Technical: Broad understanding of security technology.
* Business: High level understanding of PwC's business model, service offerings, and business operating environment as it pertains to the firm's threat landscape. Ability to frame threats and exposures in a business context recognized by non-technical staff and executives.
* Domain landscape: Knowledge of assurance and technical security principles
* Communication: Ability to leverage business communication skills to inform, persuade, and teach stakeholders across a global network of member firms' staff and leadership to enable effective information security activities and processes in line with the cyber readiness program
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
Yes
Government Clearance Required?
No
Job Posting End Date