ITSCo - NIS - Vulnerability Management

<br>A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You’ll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firms intellectual assets.<br><br><p>To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.</p><p></p><p>As a Manager, you&
39;ll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:</p><p></p><ul><li>Develop new skills outside of comfort zone.</li><li>Act to resolve issues which prevent the team working effectively.</li><li>Coach others, recognise their strengths, and encourage them to take ownership of their personal development.</li><li>Analyse complex ideas or proposals and build a range of meaningful recommendations.</li><li>Use multiple sources of information including broader stakeholder views to develop solutions and recommendations.</li><li>Address sub-standard work or work that does not meet firm&
39;s/client&
39;s expectations.</li><li>Use data and insights to inform conclusions and support decision-making.</li><li>Develop a point of view on key global trends, and how they impact clients.</li><li>Manage a variety of viewpoints to build consensus and create positive outcomes for all parties.</li><li>Simplify complex messages, highlighting and summarising key points.</li><li>Uphold the firm&
39;s code of ethics and business conduct.</li></ul><p></p><p></p><p></p><br><br><p><b><u>Job Requirements and Preferences</u></b><span>:</span><br /><br /><b><u>Basic Qualifications</u></b><span>:</span><br /><br /><b>Minimum Degree Required</b><span>:</span><br /><span>High School Diploma</span><br /><br /><b>Minimum Years of Experience</b><span>:</span><br /><span>4 year(s) of proven success in roles involving leveraging information technology to conduct forensic technology or cyber-security analyses</span><br /><br /><b><u>Preferred Qualifications</u></b><span>:</span><br /><br /><b>Degree Preferred</b><span>:</span><br /><span>Bachelor Degree</span><br /><br /><b>Preferred Fields of Study</b><span>:</span><br /><span>Computer and Information Science</span><br /><br /><b>Certification(s) Preferred</b><span>:</span><br /><span>CISSP, CISM, CISA, CCIE, CCNA, CCNP, CCSA</span><br /><br /><b>Preferred Knowledge/Skills</b><span>:</span><br /><span>Demonstrates extensive knowledge and/or a proven record of success in the specialization of network, infrastructure and application security solutions. Demonstrates extensive knowledge and/or a proven record of success in roles involving, managing IT related security management projects and solutions and its impact on an overall business IT infrastructure profile, preferably for a global network of consulting firms, which includes the following areas:</span><br /><span>- New and existing IT programs and projects to identify, track and remediate applications and infrastructure vulnerabilities where needed including assessment of vulnerabilities, sources of threats and current security state to determine the overall risk rating of a business technical environment in order to prioritize necessary remediation activities;</span><br /><span>- New security technologies, the implementation requirements of those security technologies, and integration of those into a larger solution; Web hosting architecture and principles, including network, infrastructure and application security solutions; Risk assessment/acceptance factors that can affect business and security decisions;</span><br /><span>- Data classification and its impact on the security design of networking solutions;</span><br /><span>- business processes and business drivers that can affect system designs; and,</span><br /><span>- Innovation, new solutions and processes; incorporating new technologies when warranted.</span><br /><br /><span>Demonstrates extensive abilities and/or a proven record of success in analyzing new networking solutions, identifying potential security concerns, and developing approaches used to mitigate identified risks, including the following areas:</span><br /><span>- Influencing and collaborating with members of the IT organization to implement recommendations, assess and/or enhance the firm&
39;s information security posture by leading remediation efforts of identified vulnerabilities, including firm assets, infrastructure;</span><br /><span>- Leveraging Enterprise Vulnerability Solutions: Qualys, Nessus, AppDetective, Firemon, Nipper; Enterprise URL Filtering Solutions: Websense, Blue Coat, McAfee; Enterprise Rights Management Solutions: Avecto, ViewFinity, BeyondTrust; Enterprise Whitelisting Solutions: Bit9, McAfee Application Control, ViewFinity; Networking protocols and services, including their relevant security issues: TCIP/IP, IPX/SPX, DNS, SNMP, 802.1x, SSL etc.; Windows, Unix operating systems and related security concerns;</span><br /><span>- Executing and utilizing processes and threat vulnerability tools, reviewing vulnerabilities analyses and results, scanning techniques;</span><br /><span>- Deploying tools and processes to evaluate and remediate threats and vulnerabilities in applications and infrastructure;</span><br /><span>- Performing research on pertinent technical matters, especially leading and independently reviewing application threat vulnerability assessments;</span><br /><span>- Utilizing creative solutions when problem-solving, collaborating effectively as part of a team, yet functioning well with independent responsibilities, especially the ability to multitask and extreme attention to detail;</span><br /><span>- Communicating clearly on technical concepts and issues to non-technical business leadership, including translating technical security verbiage;</span><br /><span>- Demonstrating willingness to take the initiative for individual personal growth and development; and,</span><br /><span>- Adapting to changing schedules and work assignments, including willingness to travel domestically and globally, when required, and extended work hours.</span><br /> </p><br>At PwC, our work model includes three ways of working: virtual, in-person, and flex (a hybrid of in-person and virtual). Visit the following link to learn more: https://pwc.to/ways-we-work.<br><br>PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy.<br><br>All qualified applicants will receive consideration for employment at PwC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC is proud to be an affirmative action and equal opportunity employer.<br><br>For positions based in San Francisco, consideration of qualified candidates with arrest and conviction records will be in a manner consistent with the San Francisco Fair Chance Ordinance.<br><br>For positions in Colorado, visit the following link for information related to Colorado's Equal Pay for Equal Work Act: https://pwc.to/coloradoifsmanager. <span style='display:none'>357494 357494WD</span><br><br>
LI-Remote