FY25 - Risk Assurance - Senior Manager - IT Cybersecurity

Growing as a strategic advisor, you leverage your influence, expertise, and network to deliver quality results. You motivate and coach others, coming together to solve complex problems. As you increase in autonomy, you apply sound judgment, recognising when to take action and when to escalate. You are expected to solve through complexity, ask thoughtful questions, and clearly communicate how things fit together. Your ability to develop and sustain high performing, diverse, and inclusive teams, and your commitment to excellence, contributes to the success of our Firm.

Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:

• Craft and convey clear, impactful and engaging messages that tell a holistic story.
• Apply systems thinking to identify underlying problems and/or opportunities.
• Validate outcomes with clients, share alternative perspectives, and act on client feedback.
• Direct the team through complexity, demonstrating composure through ambiguous, challenging and uncertain situations.
• Deepen and evolve your expertise with a focus on staying relevant.
• Initiate open and honest coaching conversations at all levels.
• Make difficult decisions and take action to resolve issues hindering team effectiveness.
• Model and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements.

A career in our Cyber Security practice, within Risk Assurance. Helps business leaders protect and manage their risk related to information regarding technology, people, systems, processes, culture, and physical surroundings. We help clients’ understand their current capability and develop a plan to build cyber security resilience to identify, protect, detect and respond to cybersecurity threats, including  advising on various regulatory and data privacy issues.

You will be involved in the following tasks:

• Perform assessment / Design/  implementation related to cyber Security:
  • Governance using various standards / frameworks such as NIST, ISO 27000 family, PCI-DSS, COBIT, CIS, and other established standards; or
  • Various application security and various infrastructure security (e.g operating System, database, firewall, switches, API and other security devices). This includes security assessment on web applications / infrastructures / clouds / mobile applications; or
  • Cloud security; or
  • Red teaming exercise; or
  • Cyber incident response, threat hunting and incident analysis; or
  • Operation Technology security (preferably in energy, mining, utilities and oil & gas industry). 
• Provide recommendations/ advice to the clients.
• Train, coach and upskill team members’ capabilities.
• Perform active business developments, marketing, proposal preparation process, and lead pursuit of IT-related security projects.
• Interacting with clients on solutions and executing projects on client engagements, forming client relationships and demonstrating an understanding of the client’s business.
• Preparing concise and accurate documents / report, leveraging and utilizing MS Office (Word, Excel, Access, PowerPoint).
• Providing candid, meaningful feedback in a timely manner to the group.
• Keeping leadership informed of progress and issues.

To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.

General Requirements:

• A Bachelor’s or Master’s degree in related area, preferably from Information Engineering, Information System, Computer Engineering, or other IT-related degree.
• Relevant experience in Cybersecurity, Infrastructure Security, or Data Protection, Identity and Access Management.
• Related professional certifications are preferred, but not mandatory, such as CISSP, CEH, CCSP, GIAC, CIAM, CIST, CIMP, CISSP, CISA, SABSA, etc.
• Possess knowledge and understanding of risks and its impact to the business and have the ability to articulate the need and value of security solutions to an organization.
• Strong analytical, creative problem-solving and negotiation skills, with the ability to thrive in a fast-paced and dynamic environment.
• Excellent written and oral communication skills, including both technical and business writing, documentation and presentation skills, with the ability to present ideas and results to technical and non-technical audiences.

Experience required:

• Senior Manager: Solid experience, with a minimum of 10-15 years as a Cyber Security Risk Assurance lead in Consulting industry.