Skip to main content

Vulnerability Management Senior Associate

Posted: 2 Nov 2020 Closes: 2 Dec 2020
Belfast, Northern Ireland Region UK Competitive
Permanent & Full-time PwC_45988BR

Job description

Who we are

PwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network. Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to the execution of the global Cyber Readiness Program, moving from local to globally-provided services.

Our mission is to identify, control, and reduce the attack surface across the member firm network while increasing our adversaries' cost of attack.

In order to deliver the Cyber Readiness Program, the NIS team is structured into the following Pillars:

• Information Security Risk and Compliance (ISRC)
• Chief Information Security Office (CISO)
• Security Architecture, Engineering, Innovation and Transformation (SAEIT)
• Cyber Security Services
• Strategy and Alliances
• Chief of Staff

NIS is building the first global cyber security function at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide, as well as our global clients. If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so.

The CISO pillar within NIS is responsible for the following services:

• Engagement
• Governance
• Measurement
• Service Interface

If you love the business side of information security this is the place to be. Within CISO pillar we work closely with member firm stakeholders to understand their business model and roadmap for technology. In turn CISO pillar outline the roadmap for NIS and drive engagement and adoption of central security services in line with the PwC Cyber Readiness program. Management of relationships between NIS and the business is key to delivering the cyber readiness mission. Whether it be integrating solutions, driving operational processes or providing guidance back to NIS to further enhance our strategy, CISO pillar provide the engagement and personal touch to enable NIS to deliver maximum value to the customer, the PwC Network of firms.
About the role

The Vulnerability Management team have the goal to minimize the overall Information Technology (IT) security risk to the PwC Network of Firms by identifying, reporting, and driving the mitigation of security vulnerabilities within the network, endpoint, and cloud infrastructures in a consistent and expeditious manner. By minimizing the internal and external IT security risks, Vulnerability Management (VM) helps defend against proprietary and client data loss, and reduces the ability for threat actors to carry out malicious activities against the PwC Network of Firms. Ultimately VM assists in protecting the PwC's business mission, the PwC brand and our internet reputation.
  • Direct impact to the identification, control and reduction of the attack surface;
  • Deliver inventory data and/or vulnerability data and/or metrics to other NIS team and IT operations;
  • Collaborate with Threat Intelligence, red team, incident response to drive swift remediation on high risk vulnerabilities;
  • The Vulnerability Management team build out, support and maintain inventory of internal and external assets and name space;
  • Execute, coordinate, document network discovery scans and vulnerability scans for operating system and/or database assets;
  • Craft different types vulnerability reports manually or through tools to drive remediation;
  • Engage IT operations as needed to driving remediation of vulnerabilities;
  • Aggressively but tactfully communicate the right priority to reduce risk and support PwC internet reputation;
  • Support other Cyber Security teams sharing inventory and/or vulnerability information;
  • Engage project stakeholders as needed to help drive remediation of vulnerabilities on infrastructure before new applications or updates go live;
  • Collaborate with other IT groups on monthly patching, non-patch vulnerability remediation, vulnerability exception review;
  • Perform ad-hoc vulnerability scans and/or reports; and
  • Interact with all levels of management, external bodies, stakeholders, and policy holders including senior leadership.

Who we are looking for
  • 2 - 4 Years' of demonstrable professional roles involving information security, IT management and/or major program management
  • Intermediate to expert Excel skill;
  • Understanding of vulnerability management processes:
    • scanning
    • reporting
    • remediation (knowledge of Windows operating system, Linux operating systems);
  • Intermediate to expert scripting skills (Python, Powershell);
  • Hardening processes;
  • Strong analytical skills including the ability to research, analyse, and present vulnerability findings;
  • Strong work ethics and integrity to adhere to firm policies and procedures;
  • Strong business and global acumen to help manage relations at a global stage;
  • Energetic and organized with ability to handle multiple priorities at the same time; and
  • Great attention to detail to ensure all artifacts produced are concise and accurate.

Not the role for you?

Did you know PwC offer flexible contract arrangements as well as contingent work (ie temporary or day rate contracting)?
The skills we look for in future employees

All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, 'The PwC Professional' and are made up of five core attributes; whole leadership, technical capabilities, business acumen, global acumen and relationships.

Learn more here: www.pwc.com/uk/careers/experienced/apply
Diversity

Valuing Difference. Driving Inclusion.

We work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool because creating value through diversity is what makes us strong as a business, enabling us to solve important problems and deliver value to our clients. We encourage an inclusive culture where people can be themselves, are valued for their strengths and are empowered to be the best they can be. As an organisation with an increasingly agile workforce, we also support different ways of working offering flexible working arrangements. Learn more here about our work to support an inclusive culture.

www.pwc.com/uk/diversity

PwC

Share Job