About PwC
Background
We are experiencing significant growth in our cyber security practise which supports our financial services clients. This growth is driven by demand from our clients for greater assistance in dealing with increasingly complex cyber security risks and opportunities resulting from changes to the technology, threat and regulatory landscape. Our clients include leading global banks, insurers and investment managers.
They rely upon us to help them design and advise on cyber security processes and controls, provide threat intelligence, monitor and detect threats and guide them in how to respond to threats, advise on the right corporate culture, and understand legal and regulatory obligations so they can effectively safeguard their organisations.
About the role:
A senior manager in our Financial Services Cyber Security practise provides expert technical advice, guidance and support on cyber security, both in business-as-usual and for live and planned projects within our clients business.
You will be a generalist but have specialities in specific areas which can be developed and honed as your career develops. This role would suit someone who is comfortable working across the cyber security spectrum and disciplines. We will offer you opportunities to develop your skills in different areas of cyber security.
In this role, you can expect to perform any of the following client delivery work:
Define a security strategy and/or target operating model for an information security function
We are experiencing significant growth in our cyber security practise which supports our financial services clients. This growth is driven by demand from our clients for greater assistance in dealing with increasingly complex cyber security risks and opportunities resulting from changes to the technology, threat and regulatory landscape. Our clients include leading global banks, insurers and investment managers.
They rely upon us to help them design and advise on cyber security processes and controls, provide threat intelligence, monitor and detect threats and guide them in how to respond to threats, advise on the right corporate culture, and understand legal and regulatory obligations so they can effectively safeguard their organisations.
About the role:
A senior manager in our Financial Services Cyber Security practise provides expert technical advice, guidance and support on cyber security, both in business-as-usual and for live and planned projects within our clients business.
You will be a generalist but have specialities in specific areas which can be developed and honed as your career develops. This role would suit someone who is comfortable working across the cyber security spectrum and disciplines. We will offer you opportunities to develop your skills in different areas of cyber security.
In this role, you can expect to perform any of the following client delivery work:
Define a security strategy and/or target operating model for an information security function
- Conduct a security threat, risk, capability and/or maturity assessment
- Define, mobilise and manage delivery of a security enhancement programme
- Manage delivery of a technical threat and vulnerability assessment (e.g. CBEST test)
- Provide security subject matter expertise within a wider strategic client engagement
- For architects only - Define an enterprise security architecture framework and supporting blueprints
You can also expect to perform the following business development activities:
- Develop and manage relationships with security stakeholders within our clients
- Meet with clients to understand their needs and produce proposals to address them
- Develop toolkits, methodologies and accelerators to enhance our sales and delivery capability
- Contribute to our research and thought leadership to improve the eminence of our practice
- Collaborate with third party vendors to develop new and innovative security services for our clients
Finally, you can expect to contribute to the following practise management activities:
- Mentor junior members of our cyber security team and support their development
- Help recruit and retain our cyber security team members
- Ensure the quality of all our internal, client and public facing deliverables
Requirements:
We are looking for individuals that thrive in an entrepreneurial environment such that they are comfortable working independently with little supervision and have a strong desire to learn and a willingness to share knowledge.
People that succeed in our business have a passion for cyber security, are naturally inquisitive and get a buzz from solving complex problems. Furthermore, they have a good attention to detail allied with exceptional analytical and technical aptitude. Most of all, they are excellent communicators as we are in a business founded on strong relationships.
As a minimum, candidates for this role must have the following:
We are looking for individuals that thrive in an entrepreneurial environment such that they are comfortable working independently with little supervision and have a strong desire to learn and a willingness to share knowledge.
People that succeed in our business have a passion for cyber security, are naturally inquisitive and get a buzz from solving complex problems. Furthermore, they have a good attention to detail allied with exceptional analytical and technical aptitude. Most of all, they are excellent communicators as we are in a business founded on strong relationships.
As a minimum, candidates for this role must have the following:
- Significant information security experience in any form (i.e. operational, consultancy and/or sales)
- Strong academic background such as a Bachelors or Masters degree in any subject
- Excellent business writing skills
- Experience or understanding of security legislation and regulatory frameworks (e.g. DPA, PCI-DSS, RIPA, PSD)
- Experience or understanding of security methodologies and industry standards (e.g. ISO27001, NIST, SANS)
- Experience of managing projects involving task prioritisation, budget tracking and working under tight deadlines
- Strong understanding of IT infrastructure fundamentals such as networks, operating systems and databases
- Knowledge of infrastructure and application security requirements and benchmarks (e.g. OWASP, CIS)
While not prerequisites, the following will be advantageous:
- Any cyber/information security certification (e.g. CISSP, CISA, CISM, GIAC)
- Knowledge of architecture frameworks (e.g. TOGAF, Zachman, SABSA)
- Any project or programme management certification (e.g. PRINCE2, PMI, MSP)
- Experience working in a financial services organisation of any type
- Experience of internal or external consulting or audit engagements
- Exposure to multi-tier, web based and cloud based IT architectures
- Knowledge of security technologies (e.g. AV, SIEM, IDM, IPS, F/W, SSO, DLP)
- Knowledge of security assessment frameworks (e.g. threat modelling, controls assessment, risk assessment)
About PwC
We’re one of the world’s leading professional services organisations. From 158 countries, we help our clients, some of the most successful organisations on the globe, as well as its most dynamic entrepreneurs and thriving private businesses, to create the value they want. We help to measure, protect and enhance the things that matter most to them.
The skills we look for in future employees
All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, 'The PwC Professional' and are made up of five core attributes; whole leadership, technical capabilities, business acumen, global acumen and relationships.
Learn more here www.pwc.com/uk/careers/experienced/apply
Diversity
We work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool, as well as those who reflect the diverse nature of our society. And we aim to encourage a culture where people can be themselves and be valued for their strengths. Creating value through diversity is what makes us strong as a business and as an organisation with an increasingly agile workforce, we're open to flexible working arrangements where appropriate.
Learn more here www.pwc.com/uk/diversity
