About This Role
Supporting and contributing to the delivery of Global Network Information Security (NIS) services is central to this role, ensuring consistent implementation of security controls in compliance with PwC’s global Information Security Policy. The analyst will lead and coordinate the end-to-end lifecycle of security incidents and proactively engage in global and regional CISO pillar initiatives.
Responsibilities
- Support and contribute to the delivery of Global Network Information Security (NIS) services and ensure consistent implementation of security controls in compliance with PwC’s global Information Security Policy
- Lead and coordinate the end-to-end lifecycle of security incidents, acting as a technical point of contact for investigation, escalation, communication, and post-incident review, ensuring timely resolution and lessons-learned documentation in alignment with PwC's security frameworks
- Proactively engage in global and regional CISO pillar initiatives
- Implement periodic access reviews and security hygiene activities across in-scope applications and platforms, ensuring compliance with least-privilege principles, identity governance policies, and regulatory requirements through structured and data-driven review processes
- Manage security exceptions processes, issue management, global risk assessments and evaluation, stakeholder engagement, and time-bound approvals, ensuring exceptions are tracked, reviewed, and remediated in a timely and governed manner
- Actively involve and support day-to-day security activities
Requirements
- Minimum 3 years of experience and solid knowledge of core information security domains including identity and access management (IAM), vulnerability management, endpoint security, incident management, and cloud security principles, with the ability to translate technical findings into business-relevant risk language
- Working knowledge of relevant regulatory frameworks and standards such as NIS2 Directive, ISO 27001, NIST CSF, and GDPR, with the ability to apply these frameworks pragmatically within a large professional services environment
- Demonstrated ability to work independently and confidently with senior business stakeholders, articulating security risks, requirements, and recommendations clearly and concisely
- Strong analytical mindset with the ability to assess, prioritize, and communicate security risks objectively, supporting exception decisions and incident responses with structured, evidence-based reasoning
Benefits
- An annual bonus and the opportunity to advance quickly
- A motivating work environment where collaboration with ambitious colleagues and recognition for your contributions are central
- A wide range of tailored training focused on professional growth and leadership development
