Business Information Security Officer (BISO) - Senior Associate
Detalhes do emprego
Line of Service Internal Firm Services Industry/Sector Not Applicable Specialism IFS - Risk & Quality (R&Q) Management Level Senior Associate Job Description & Summary We believe that challenges are better solved together. That's why you'll join a diverse, global community of solvers - an unexpected mix of people that come together to build trust in society and solve important problems. With us, you are encouraged to lead with your heart and values, and where your unique skills are developed and put to work in unexpected and exciting ways, superpowered by technology. Team description: PwC’s global cybersecurity strategy revolves around 4 key points: to identify, control, and reduce the attack surface across the member firm network, and increase our adversaries’ cost of attack. Our mission protects 223,000+ PwC members across 157 member firms worldwide. We keep our data secure and protect the PwC brand from cyber risks. Mandated at the network level, Network Information Security (NIS) is responsible for this strategy. NIS is a globally distributed team across PwC. The Singapore Business Information Security Officer (BISO) works closely with business stakeholders to understand their business model and roadmap for technology, acting as the primary interface between the business and the global security organisation. Management of relationships with the business is key to delivering on our global cybersecurity strategy. Whether it be implementing new solutions, driving operational effectiveness and efficiency or providing guidance back to global teams to further enhance our strategy, the Singapore BISO provides the engagement and builds stakeholder relationships to enable the security organisation to deliver maximum value to the firm. We have a new vacancy in the Singapore Network Information Security team for a BISO Senior Associate to continue building their cyber security career. What does the role look like? This role is a key member of the Singapore Network Information Security (NIS) team. Reporting into the Singapore Head of Information Security, this role works closely with your Global NIS colleagues maintaining and developing engagement with both the Singapore firm and the wider global security community. The BISO Senior Associate role is primarily focused towards:
- Being the “face of NIS” within the member firm, interfacing between the business and the NIS operational teams
- Management and delivery of both planned projects and risk reduction initiatives from gathering business requirements to working with technical teams, testing and rolling out changes
- Conducting business-as-usual operational cyber security functions, like exception requests, control improvements, and managing incidents
- Assisting business teams with navigating various security assessment processes and teams, providing security guidance and support
- Working closely with the Global NIS Service Teams (e.g Vulnerability Management, Application Security) on security matters relating to Singapore
- Taking data and translating into a relatable, digestible, creative form to use with business teams and senior stakeholders (eg presentations, dashboards, reports)
- Assisting with identification and management of information security risk areas eg: vulnerabilities, control deficiencies etc
- Proactive, time management skills, task management skills
- Enjoy helping people with problem solving, customer service outlook - working with business teams to achieve positive outcome
- Project management experience
- Communication skills to assist, inform, and build relationships with stakeholders in both the business and support teams, to enable effective information security activities and processes aligned to the firm’s security strategy
- Ability to manage workload - prioritise and recognise when to escalate to management
- Previous experience in a similar cyber or risk role (approx 3. years)
- Undergraduate Degree (e.g., BA, BS) in Information Security, or Information Systems, or Technology, or Computer Science, or field of study applicable to the role and/or completed certifications involving cybersecurity. Industry certifications are also of value (Security+, CISM, CISSP, e.t.c - either acquired or planning to acquire)
- A genuine desire to grow your career in cyber security
- An interest of PwC’s business model, service offerings, and business operating environment as it pertains to the firm’s threat landscape
- Intermediate to strong data manipulation and visualisation skills desirable - eg: PowerBI, Alteryx, Excel
- Experience working in a Globally distributed team is desirable
- Proactive, time management skills, task management skills
Apply safely
To stay safe in your job search, information on common scams and to get free expert advice, we recommend that you visit SAFERjobs, a non-profit, joint industry and law enforcement organization working to combat job scams.
