Cyber Risk Analytics and Reporting Manager, London
Posted on Jan 16, 2019 by PWC-1
A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You'll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firms intellectual assets.
Our Network Informations Systems team helps organisations transform their network architecture and infrastructure to ensure security controls are always operating efficiently. As part of the team, you'll focus on the architecture of information systems, including the design and implementation of network architecture and information storage to optimise programme security and delivery for our clients.
PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire network of member firms.
Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to the execution of the global Cyber Readiness Program, moving from local to globally-provided services.
Our mission is to identify, control, and reduce the attack surface across the network of member firms while increasing our adversaries' cost of attack.
In order to deliver the Cyber Readiness Program, the NIS team is structured into the following Pillars:
- Information Security Risk and Compliance (ISRC)
- Chief Information Security Office (CISO)
- Security Architecture, Engineering, Innovation and Transformation (SAEIT)
- Cyber Security Services
- Strategy and Alliances
- Chief of Staff
NIS is redefining cyber security on a global scale at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide, as well as our global clients.
If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so.
The Information Security Risk and Compliance pillar within NIS is responsible for the following services
- Information Security Policy and Governance
- Risk Management and Compliance
- Metrics and Reporting
- Cyber Readiness and Program Effectiveness
- Quality Management (eGRC)
If you love the strategic side of information security this is the place to be. Within ISRC we work to create the global information security governance framework within PwC. Management of information security risks is imperative to our mission and ISRC set the minimum baseline for information security across the network of member firms. Identification, tracking and mitigation of risk through an enterprise risk register is the overall goal for the function, enabling PwC to have full visibility into potential information security risks across our estate. Delivering a business first framework aligned to industry standards in information security enables NIS to coordinate risk management and compliance efforts across the Network of firms.
Metrics and Reporting
The Metrics and Reporting team is primarily responsible for defining key metrics criteria and communicating what needs to be measured at an operational level. They frequently engage with NIS senior leadership to capture and communicate current state performance around a variety of metrics, including key risk indicators, key performance indicators, and project and service effectiveness throughout NIS. The Metrics and Reporting team oversees multiple databases to track key data, and works with PwC member firms to create customized, localized dashboards containing relevant reporting.
Demonstrates extensive knowledge of:
- Information security metrics and reporting principles or related technical domain that is applied in the context of a broader understanding of information security and related systems and processes;
- Contributing to the development of new technical domain subject matters;
- Resolving complex problems by applying continuously significant independent judgment through collaborating with others;
- Influencing others through a small team of direct reports, through work on projects and in teams, or through leading portions of larger projects;
- Demonstrating extensive understanding in how to collect and measure operational metrics through strategic impact abilities in the Metrics and Reporting space from a managerial perspective;
- Encouraging continuous improvement and refinement within Metrics and Reporting and nurturing and developing less-experienced staff through coaching and written and verbal feedback;
- Building and maintaining relationships across the network of firms to effectively deliver Metrics and Reporting activities on the local and the network level;
- Translating operational and managerial metrics into risk reduction.
Demonstrates thought leader-level abilities with, and a proven record of success directing efforts such as:
- Managing multiple relationships and stakeholders throughout major transformation;
- Balancing business stakeholders and a central technology service organization;
- Navigating a matrix organization;
- Collaborating with multiple stakeholders across functional and technical skillsets;
- Defining what to measure at an operational level;
- Designing, maintaining and refining the key risk indicators to illustrate the program's progress;
- Measuring the effectiveness of projects and services;
- Engagement with stakeholders across multiple functions within NIS to capture and analyse relevant metrics;
- Consolidation and management of metrics databases;
- Engage member firm technology groups to deliver onboarding of local users into NIS current processes;
- Engage member firms to deliver customized, local dashboards; and
- Experience creating and maintaining databases that track a wide variety of data.
We're one of the world's leading professional services organisations. From 158 countries, we help our clients, some of the most successful organisations on the globe, as well as its most dynamic entrepreneurs and thriving private businesses, to create the value they want. We help to measure, protect and enhance the things that matter most to them.
The skills we look for in future employees
All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, 'The PwC Professional' and are made up of five core attributes; whole leadership, technical capabilities, business acumen, global acumen and relationships.
To apply, please visit our website via the button below.
We work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool, as well as those who reflect the diverse nature of our society. And we aim to encourage a culture where people can be themselves and be valued for their strengths. Creating value through diversity is what makes us strong as a business and as an organisation with an increasingly agile workforce, we're open to flexible working arrangements where appropriate.
Learn more here