Risk & Quality - Information Security Analyst- Associate - UAE

Risk & Quality - Information Security Analyst- Associate - UAE

PwC

We are a community of solvers combining human ingenuity, experience and technology innovation to help organisations build trust and deliver sustained outcomes.

Line of Service: Internal Firm Services

Industry/Sector: Not Applicable

Specialism: IFS - Risk & Quality (R&Q)

Management Level: Associate

Job Description & Summary

PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network.

Our mission is to identify, control, and reduce the attack surface across the member firm network while increasing our adversaries’ cost of attack. In order to deliver the Cyber Readiness Program, the NIS team is structured into the following Pillars:

1. Information Security Risk and Compliance (ISRC)
2. Chief Information Security Office (CISO)
3. Security Architecture, Engineering, Innovation and Transformation (SAEIT)
4. Cyber Security Services
5. Strategy and Alliances
6. Chief of Staff

If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so.

The CISO pillar within NIS is responsible for the following services:

1. Engagement
2. Governance
3. Measurement
4. Service Interface

If you love the business side of information security this is the place to be. Management of relationships between NIS and the business is key to delivering the cyber readiness mission.

Core skills within the CISO Services Team consist of:

1. Conduct analysis of member firm needs in order to make appropriate decisions for the implementation of NIS global security strategy;
2. Engage with member firm stakeholders to assess security threats/vulnerabilities and manage business risk;
3. Facilitate member firm support from Security Architecture, Engineering, Innovation, and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;
4. Assess service availability, adoption rates, and maturity to manage risk to business programs and processes;
5. Govern member firms for compliance with PwC’s Information Security Policy (ISP) and legal/regulatory frameworks;
6. Engage with Global IT and Applications to review security controls against ISP.

Strategic and Technical Orientation / Job Content:

Individuals selected for this role are expected to have both extensive knowledge and managerial know-how related to the following aspects of the CISO pillar skills matrix:

1. Experience managing multi-function relationships throughout major transformation;
2. Understanding of security technology;
3. Experience in a role balanced between business stakeholders and a central service organization;
4. Navigating a multifaceted, matrix organization;
5. Collaborating with multiple stakeholders across functional and technical skillsets.

Job Objectives and Key Metrics:

Responsibilities:

1. Manage relationships across PwC member firms
2. Map existing member firm services to NIS service catalogue
3. Define roadmap for integration of member firm services into NIS shared services
4. Provide consultancy throughout service integration

Metrics:

1. Capture metrics aligned to service integration and service adoption
2. Drive quality of service to our stakeholders

Education Level:

Required: High school diploma or G.E.D.
Preferred: Undergraduate Degree (e.g., BA, BS) in Information technology or field of study applicable to the role and/or completed certifications involving cybersecurity

Experience Level:

1 - 3 Years’ of progressive professional roles involving information security, IT management and/or major program management.

Other Details:

An effective CISO pillar candidate will also possess the following skills:

1. Analytical: Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.
2. Technical: Broad understanding of security technology.
3. Business: High level understanding of PwC’s business model, service offerings, and business operating environment as it pertains to the firm’s threat landscape.
4. Domain landscape: Knowledge of assurance and technical security principles.
5. Communication: Ability to leverage business communication skills to inform, persuade, and teach stakeholders across a global network of member firms’ staff and leadership.

Travel Requirements: 0%

Available for Work Visa Sponsorship? Yes

Government Clearance Required? Yes

Job Posting End Date: