A career in Information Security, within internal firm services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You'll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firm's intellectual assets.
About the team
PwC are driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network. Mandated at the network level, NIS operate outside IT and are responsible for this major program initiative, from definition of the security strategy to execution of the global Cyber Readiness Program, moving from local to centralized services. Our mission is to identify, control & reduce the attack surface across the member firm network while increasing our adversaries' cost of attack. In order to deliver the Cyber Readiness Program the NIS team is structured into the following Pillars
NIS are building the first global cyber security function at PwC. Our mission protects 300,000 PwC members across 160 member firms worldwide as well as our global clients.
If you are seeking an exciting career with the scope to grow your security skills through major change on a global scale, then NIS will empower you to do so. The SAEIT pillar within NIS is responsible for the following services
About the role
The Application Security team own following tasks
Definition of application landscape & creation of application risk register across the PwC Network of firms
Utilisation of application security tools for scanning applications for common application security risks
Engagement with development teams to articulate complex application security risks
Continual engagement throughout the software development lifecycle (SDLC) to identify, track & reduce application security risks across new applications
Assessment of application security vulnerabilities across existing application landscape.
Plan & prioritise application security vulnerabilities & develop structured remediation plan
Engaging stakeholders in ISRC to ensure technical vulnerabilities that cannot be remediated are managed & mitigating controls are developed to reduce the risk of said vulnerability within the business environment.
An effective SAEIT candidate will also possess the following skills
2-4 years relevant experience
Undergraduate Degree (e.g., BA, BS) or equivalent experience
Broad understanding of enterprise technology & how to design & build a range of security tools
Knowledge of how attack techniques are used in enterprise intrusions to gain entry, gain privilege, and ultimately accomplish a nefarious objective against a victim organization.
Experience engaging business & technology stakeholders at all levels to gather long term goals & requirements
Understanding of how to design & build security technology solutions aligned to a global central service environment
Understanding of security technology at an enterprise & solution level
Hands on engineering experience with enterprise security technology
Experience working to transition technology from a local focus to a central technology service organization
Experience working in a complex, matrix organization
Experience working with multiple stakeholders across functional and technical skillsets
Be unique. Be authentic. However you prefer to say it, we really mean it. Our culture
embraces people’s diverse perspectives and creates a positive environment where everyone
belongs. We’re determined to build a better, more connected world for everyone.