NIS - Information Security Compliance/Audit Manager

<br>A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You’ll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firms intellectual assets.<br><br><p>To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.</p><p></p><p>As a Manager, you&
39;ll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:</p><p></p><ul><li>Develop new skills outside of comfort zone.</li><li>Act to resolve issues which prevent the team working effectively.</li><li>Coach others, recognise their strengths, and encourage them to take ownership of their personal development.</li><li>Analyse complex ideas or proposals and build a range of meaningful recommendations.</li><li>Use multiple sources of information including broader stakeholder views to develop solutions and recommendations.</li><li>Address sub-standard work or work that does not meet firm&
39;s/client&
39;s expectations.</li><li>Use data and insights to inform conclusions and support decision-making.</li><li>Develop a point of view on key global trends, and how they impact clients.</li><li>Manage a variety of viewpoints to build consensus and create positive outcomes for all parties.</li><li>Simplify complex messages, highlighting and summarising key points.</li><li>Uphold the firm&
39;s code of ethics and business conduct.</li></ul><p></p><p></p><p></p><br><br><p><b><u>Job Requirements and Preferences</u></b><span>:</span><br /><br /><b><u>Basic Qualifications</u></b><span>:</span><br /><br /><b>Minimum Degree Required</b><span>:</span><br /><span>High School Diploma</span><br /><br /><b>Minimum Years of Experience</b><span>:</span><br /><span>4 year(s) in progressive professional roles involving Project Management, Risk Management, Information Security, or IT Controls Auditing.</span><br /><br /><b>Certification(s) Required</b><span>:</span></p><p>CPA, CISA, CAP, or CRISC</p><p>CISSP, CSSLP, or CCSP</p><p>PMP, PRINCE2</p><p><b><u>Preferred Qualifications</u></b><span>:</span><br /><br /><b>Degree Preferred</b><span>:</span><br /><span>Bachelor Degree</span><br /><br /><b>Preferred Knowledge/Skills</b><span>:</span></p><p>Demonstrates intimate knowledge of Security domains such as Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, and Software Development Security; and Security, IT, and risk management frameworks, standards, and guidelines (e.g., NIST, COBIT, ISO 2700x, CMMC). </p><p>Demonstrates abilities and a proven record of success: </p><ul><li>Taking ownership of the execution of security-related activities for projects from inception to closure; </li><li>Assessing new global products and services and at defined SDLC toll gates using auditing techniques, available data/reporting, and security assessment tools to facilitate Security by Design; </li><li>Assessing existing global products and services to identify gaps using predefined security controls; best practices, and industry standards; </li><li>Auditing controls around information security, compliance, and operational processes including current and emerging technologies (e.g., cloud-computing, OneAD, web development tools, Internet of Things (IoT), management consoles, network security, PAM, and *nix-based systems; </li><li>Designing operational readiness review checklists, examination artifacts, and templates such as control testing work programs and security configuration reviews; </li><li>Reviewing mandatory configuration settings and verifying implementation in accordance with current industry standards; </li><li>Coordinating with business partners to recommend and present relevant and plausible risk mitigation activities; </li><li>Setting and continually managing project expectations with team members and other stakeholders; </li><li>Identifying gaps in process and standards that can be bridged to streamline the review and assessment process; </li><li>Managing and coaching staff; and,</li><li>Navigating a matrixed organization. </li></ul><p>Demonstrates leadership and management qualities in the following areas:</p><ul><li>Leading cross-functional internal and external teams and multiple long-term complex projects simultaneously; </li><li>Creating a positive and motivating environment; </li><li>Monitoring workloads of the team while meeting client expectations; </li><li>Respecting the work-life quality of team members; </li><li>Providing candid, meaningful feedback in a timely manner; and,</li><li>Keeping leadership informed of progress. </li></ul><br>At PwC, our work model includes three ways of working: virtual, in-person, and flex (a hybrid of in-person and virtual). Visit the following link to learn more: https://pwc.to/ways-we-work.<br><br>PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy.<br><br>All qualified applicants will receive consideration for employment at PwC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC is proud to be an affirmative action and equal opportunity employer.<br><br>For positions based in San Francisco, consideration of qualified candidates with arrest and conviction records will be in a manner consistent with the San Francisco Fair Chance Ordinance.<br><br>For positions in Colorado, visit the following link for information related to Colorado's Equal Pay for Equal Work Act: https://pwc.to/coloradoifsmanager. <span style='display:none'>312871 312871WD</span><br><br>
LI-Remote