Manager, Cybersecurity Incident Monitoring

Line of Service

Advisory

Industry/Sector

Not Applicable

Specialism

Managed Services

Management Level

Manager

Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In cybersecurity incident management at PwC, you will focus on effectively responding to, and mitigating, cyber threats, maintaining the security of client systems and data. You will be responsible for identifying, analysing, and resolving security incidents to minimise potential damage and protect against future attacks.

Meaningful work you’ll be part of

As a Manager, Cybersecurity Incident Monitoring, you’ll work as part of a team of problem solvers, helping to solve business issues, deliver high quality client service and operational efficiency. Responsibilities include but are not limited to:

• Main point of contact for escalations and True positive incidents.
• Oversee the level 2 senior security analysts' team and ensure they perform advanced analysis and investigation of security incidents detected by the level 1 security analysts or the security tools.
• Provide guidance and support to the level 2 senior security analysts and assist them with troubleshooting, escalation, and resolution of complex or critical security issues.
• Coordinate with the level 2 security analysts and other teams for incident response and recovery activities and ensure the implementation of appropriate countermeasures and remediation actions.
• Review and validate the security incident reports and recommendations prepared by the level 2 senior security analysts and ensure they meet the quality and accuracy standards.
• Conduct quality assurance and reviews of the security incident reports and recommendations and provide constructive feedback and improvement suggestions to the level 2 senior security analysts.
• Coordinate with the level 2 security analysts and other teams for complex or high-severity incidents that require further investigation or remediation.
• Conduct performance evaluation and feedback sessions for the level 2 senior security analysts and identify their training and development needs and opportunities.
• Design and deliver training and mentoring programs for the level 2 senior security analysts and ensure they acquire and maintain the relevant skills and certifications.
• Collaborate with the clients and stakeholders and provide strategic and technical advice on security incidents and services and ensure customer satisfaction and retention.
• Monitor and report on the key performance indicators and metrics of the level 2 senior security analyst team and ensure they meet the service level agreements and objectives.
• Work closely with shift leads and have a regular touch point with them on the daily report of security operations metrics, KPIs, and SLAs and find a solution to identified gaps.
• Touchpoint with L2 leads to make sure they are facilitating regular meetings and training sessions for the level 1 security analysts' team to keep them updated on the security tools, latest security threats, trends, and best practices.
• Participate in calls with client stakeholders throughout the months (monthly, quarterly, bi-weekly, Threat Hunting, etc.).

Experiences and skills you’ll use to solve

• A bachelor's degree in a relevant area of study with a preference for Computer Science or Computer Engineering.
• Industry certifications (CISSP/GIAC suite/EC-Council) are an asset.
• Minimum of 6 years in Information Technology.
• Minimum of 4 years in Information Security.
• Proficient in Incident Response and Management.
• Knowledge of various security tools (e.g. SIEM, EDR, etc.) as well as operating system flavors including but not limited to Windows, Linux, Unix.
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.
• Experience in MSSP environment.
• Knowledge of applications, databases, middleware to address security threats.
• Proficient in preparation of reports, dashboards and documentation.
• Excellent communication and leadership skills.
• Experience in performing vendor management.
• Ability to handle high pressure situations with key stakeholders.
• Good Analytical skills, Problem solving and Interpersonal skills.
• CISSP and GIAC certifications preferred.

Why you’ll love PwC

We’re inspiring and empowering our people to change the world. Powered by the latest technology, you’ll be a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work, and our continuous development environment, will take your career to the next level. We reward your impact, and support your wellbeing, through a competitive compensation package, inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at: https://jobs-ca.pwc.com/ca/en/life-at-pwc

PwC Canada acknowledges that we work and live across Turtle Island, on the land that is now known as Canada, which are the lands of the ancestral, treaty and unceded territories of the First Nations, Métis and Inuit Peoples. We recognize the systemic racism, colonialism and oppression that Indigenous Peoples have experienced and still go through, and we commit to allyship and solidarity.

Education

Degrees/Field of Study required: Degrees/Field of Study preferred:

Certifications

Required Skills

Optional Skills

Accepting Feedback, Active Listening, Analytical Thinking, Coaching and Feedback, Communication, Creativity, Cybersecurity Framework, Cybersecurity Governance, Cybersecurity Risk Management, Cybersecurity Strategy, Cyber Security Threat Mitigation, Cyber Threat Intelligence, Digital Forensics, Embracing Change, Emotional Regulation, Empathy, Firewall (Network Security), Forensic Investigation, Incident Management, Incident Remediation, Incident Response Plan, Inclusion, Intellectual Curiosity, Learning Agility.

Desired Languages

(If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No

Job Posting End Date

At PwC Canada, our most valuable asset is our people and we grow stronger as we learn from one another. We’re committed to creating an equitable and inclusive community of solvers where everyone feels that they truly belong. We understand that experience comes in many forms and building trust in society and solving important problems is only possible if we reflect the mosaic of the society we live in. We’re committed to providing accommodations throughout the application, interview, and employment process. If you require an accommodation to be at your best, please let us know during the application process. To learn more about inclusion and diversity at PwC Canada: https://www.pwc.com/ca/en/about-us/diversity-inclusion.html.