Skip to main content

Remediation Analyst - Senior Associate - London

Posted: 8 Jun 2021 Closes: 9 Jul 2021
London Competitive
Permanent & Full-time PwC_185119WD-int

About PwCWe're one of the world's leading professional services organisations. From 158 countries, we help our clients, some of the most successful organisations on the globe, as well as its most dynamic entrepreneurs and thriving private businesses, to create the value they want. We help to measure, protect and enhance the things that matter most to them.
PwC are driving major change across information & cyber security by building a centralized model to provide security services across the entire member firm network.

Mandated at the network level, NIS operate outside IT & are responsible for this major program initiative, from definition of the security strategy to execution of the global Cyber Readiness Program, moving from local to centralized services.

Our mission is to identify, control & reduce the attack surface across the member firm network while increasing our adversaries' cost of attack.

In order to deliver the Cyber Readiness Program the NIS team is structured into the following Pillars - :
  • Information Security Risk & Compliance
  • CISO
  • Security Architecture, Engineering, Innovation & Transformation (SAEIT)
  • Cyber
  • Strategy & Alliances
  • Chief of Staff

NIS are building the first global cyber security function at PwC. Our mission protects 300,000 PwC members across 160 member firms worldwide as well as our global clients.

If you are seeking an exciting career with the scope to grow your security skills through major change on a global scale, then NIS will empower you to do so.

The SAEIT pillar within NIS is responsible for the following services:
  • Security Architecture
  • Security Engineering
  • Innovation
  • Security Transformation
  • Application Security

If you love designing & building security technology this is the place to be. Within SAEIT we work closely with the business to define the NIS 5 year security roadmap. Gathering business requirements to combine PwC's goals with conceptual long term security trends to create a target architecture for NIS to deliver against. From this future state plan the Security Engineering team break down long term goals into manageable projects and look to technical security solutions to solve business problems. Designing & building security technology that span the wider PwC network of firms. Once security technologies are built the security engineering team work closely with Cyber in order to highlight the capability of the technology to ensure maximum impact as it is transitioned into an operational environment.

Scope of Responsibility:

The Application Security team own following tasks:

Definition of application landscape & creation of application risk register across the PwC Network of firms

Utilisation of application security tools for scanning applications for common application security risks

Engagement with development teams to articulate complex application security risks

Continual engagement throughout the software development lifecycle (SDLC) to identify, track & reduce application security risks across new applications

Assessment of application security vulnerabilities across existing application landscape.

Plan & prioritise application security vulnerabilities & develop structured remediation plan

Engaging stakeholders in ISRC to ensure technical vulnerabilities that cannot be remediated are managed & mitigating controls are developed to reduce the risk of said vulnerability within the business environment.

Responsibilities

Through expert knowledge of software development work with development teams to minimize vulnerabilities throughout the Software Development Lifecycle.

Through engagement with development teams educate developers around secure coding practices & common vulnerabilities in applications (OWASP Top 10))

Carry out penetration tests on applications to highlight vulnerabilities in the code

Manage reduction of vulnerabilities throughout SDLC

What we are looking for:

SAEIT pillar skills matrix:

Experience engaging business & technology stakeholders at all levels to gather long term goals & requirements

Experience mapping long term business requirements to complex security architecture frameworks such as TOGAF, SABSA, Zachman etc.

Understanding of how to design & build security technology solutions aligned to a global central service environment

Understanding of security technology at an enterprise & solution level

Hands on engineering experience with enterprise security technology

Experience working to transition technology from a local focus to a central technology service organization

Experience working in a complex, matrix organization

Experience working with multiple stakeholders across functional and technical skillsets

Range of Impact:

A 2E employee possesses deep functional knowledge in a specific subject matter area or technical domain that is applied to solve business problems and deliver necessary results.

The employee incorporates existing Firm knowledge, subject matter, or technical domain expertise into work activities.

2E staff often resolve challenging problems in collaboration with others and take initiative when appropriate to make independent choices on matters of significance, and influence others within their own functional area or team.

Demonstrates proven skills and thorough comprehension in functional areas of Application Security both as an individual contributor and team member.

Monitor workloads within the team to deliver against the requirements within Application Security while making sure leadership are informed of progress and issues.

Performs Application Security tasks with autonomy.
If you would like help and advice about applying for this role please visit the Career Hive

Share Job

If you would like help and advice about applying for this role please visit the Career Hive