Threat Intelligence Manager London
Posted on Jan 16, 2019 by PWC-1
PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network.
Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to execution of the global Cyber Readiness Program, moving from local to global services.
Our mission is to identify, control and reduce the attack surface across the member firm network while increasing our adversaries' cost of attack.
In order to deliver the Cyber Readiness Program the NIS team is structured into the following Pillars
- Information Security Risk and Compliance (ISRC)
- Chief Information Security Office (CISO)
- Security Architecture, Engineering, Innovation and Transformation (SAEIT)
- Cyber Security Services
- Strategy and Alliances
- Chief of Staff
NIS are building the first global cyber security function at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide as well as our global clients.
If you are seeking an exciting career with the scope to grow your security skills through major change on a global scale, then NIS will empower you to do so.
The Cyber pillar within NIS is responsible for the following services
- Cyber Service Transition
- Cyber Service Management
- Cyber Defence
- Cyber Threat Management
- Security Operations
- Identity and Access Management (IAM)
If you love security technology this is the place to be. Within Cyber we work closely with SAEIT to deliver implemented technology into our central service environment, taking care in integrating solutions and driving operational excellence to deliver the maximum value to our customer, the PwC network of firms. From here the focus is on the utilisation of enterprise security products in order to proactively gather cyber threat intelligence, hunt potential malicious actors across our network, conduct forensics analysis, and provide rapid response to potential cyber security incidents.
Scope of Responsibility
The Threat Intelligence team identifies external threats through tool alerts and logs made available by the Cyber Systems and Cyber Defence teams.
- Intelligence products of the team will be used to inform strategic IT decisions, deploy tactical countermeasures, and identify and prioritize other detective and countermeasure systems across the PwC network;
- Facilitate extraction of tactical intelligence from targeted activity against PwC network firms by participating in incident response activities
- Designing and implementing systems to seamlessly integrate intelligence extraction into the workflows of incident responders;
- Manage, measure, analyse, and share tactical intelligence extracted from targeted intrusions against PwC network firms for patterns to generate and maintain operational-level intrusion set definitions;
- Identify, measure, prioritize, and communicate operational-level threats to PwC network firms based on their relative contributions to the firm's risk posture;
- Identify, measure, prioritize, and communicate strategic-level threats to PwC network firms based on an understanding of the PwC business model, services, and clients to anticipate how national, regional, and global events may change the overall risk posture of PwC to cyber threat actors.
Strategic and Technical Orientation / Job Content
Cyber pillar skills matrix
- Experience transitioning, maintaining, or using Security Technologies such as Security Incident and Event Management (SIEM), Endpoint protection, Data Loss Prevention, Forensic tools;
- Understanding of security technology operational industry standards;
- Experience contributing to a central technology service organization;
- Navigating a matrix organization;
- Experience collaborating with multiple stakeholders across functional and technical skillsets.
- Exploit intelligence on identified adversaries to guide development of tactical countermeasures and detections using available systems,
- Produce periodic and ad-hoc reports summarizing threats in cyberspace to decision-makers at every level in PwC network firms - Identify, measure, manage, and fill intelligence
- Identify and prioritize architectural changes to mitigate against adversary tactics, techniques, and procedures,
- Identify and prioritize investment in new capabilities for improving detection and countermeasure deployment,
- Communicate recommendations of each to network firms and partners, and measure the effect of each.
- Collaborate with client-facing threat intelligence functions to enhance the business
- Collaborate with peers through approved information-sharing channels to enhance the collective defence, fill intelligence gaps, and learn lessons to apply to PwC
- Identify and evaluate systems and data sources for relevance and value to the threat intelligence function as pertains to PwC's needs and those of the team
- Interact with all levels of management, stakeholders, and policy holders including senior leadership
An effective Threat Intelligence candidate will possess the following skills:
- Analytical inquisitive nature and intuition as to what questions to ask, when, and their relative significance.
- Technical Sound understanding of enterprise IT systems, networks, and function. Ability to quickly internalize and apply knowledge about enterprise applications and infer configurations and designs from limited information.
Broad understanding of network protocols, operating systems, data storage and process operation. Ability to digest and apply knowledge of PwC's distributed global IT infrastructure
- Business ability to digest and apply knowledge of PwC's business model, service offerings, and business operating environment as it pertains to the firm's threat landscape.
- Geopolitical understanding of major international events and how they shape the threat landscape
- Threat landscape Exposure to intrusion sets/campaigns, how they are developed, and how knowledge of them can be translated into reducing organizational risk.
- Communication ability to appropriately distil a large amount of information down to a concise message appropriate for and useful to audiences from technical staff and associates to partners.
We're one of the world's leading professional services organisations. From 158 countries, we help our clients, some of the most successful organisations on the globe, as well as its most dynamic entrepreneurs and thriving private businesses, to create the value they want. We help to measure, protect and enhance the things that matter most to them.
The skills we look for in future employees
All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, 'The PwC Professional' and are made up of five core attributes; whole leadership, technical capabilities, business acumen, global acumen and relationships.
We work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool, as well as those who reflect the diverse nature of our society. And we aim to encourage a culture where people can be themselves and be valued for their strengths. Creating value through diversity is what makes us strong as a business and as an organisation with an increasingly agile workforce, we're open to flexible working arrangements where appropriate.
Twenty Recruitment Group