A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. Youll focus on being the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protect our firms intellectual assets. To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future. As a Director, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:
- Support team to disrupt, improve and evolve ways of working when necessary.
- Arrange and sponsor appropriate assignments and experiences to help people realise their potential and support their long-term aspirations.
- Identify gaps in the market and spot opportunities to create value propositions.
- Look for opportunities to scale efficiencies and new ways of working across multiple projects and environments.
- Create an environment where people and technology thrive together to accomplish more than they could apart.
- I promote and encourage others to value difference when working in diverse teams.
- Drive and take ownership for developing connections that help deliver what is best for our people and stakeholders.
- Influence and facilitate the creation of long-term relationships which add value to the firm.
- Uphold the firm's code of ethics and business conduct.
This position will be part of PwC IT Services (US) LLC, a member of the PwC network of firms. PwC IT Services (US) LLC (a wholly owned subsidiary of PwC IT Services Limited) provides technology services to other PwC member firms. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see www.pwc.com/structure for further details.
Additional Responsibilities: The Cyber Threat Defence team develops, socializes & deploys novel mitigations to counter threat activity observed in Incident Response operations and Threat Intelligence. This global director role is a unique mix of leadership, security engineering, penetration testing & red teaming tradecraft to operationalize offensive security capabilities & reduce risk across the PwC network of firms.
Custom Orgs:
Global LoS: Internal Firm Services
Job Requirements and Preferences:
Basic Qualifications:
Minimum Degree Required: High School Diploma
Minimum Years of Experience: 8 year(s) of progressive professional roles involving information security and/or IT management.
Preferred Qualifications:
Degree Preferred: Bachelor Degree
Certification(s) Preferred:
- Offensive Security (OSCP, OSCE), SpectreOps, Zero Point Security, and related offensive security training;
- Microsoft, Google, and Amazon cloud certifications;
- Leadership and management training; and,
- All DFIR, offensive security, development, infrastructure, and malware analysis training, certifications are valued and considered
Preferred Knowledge/Skills: Demonstrates thought leader-level abilities as a team leader, emphasizing the following areas:
- Providing an attacker perspective to senior leadership in assessing risk areas to the business, priority areas for remediation, and strategic recommendations regarding the best use of resources to improve resilience to attack techniques;
- Leading a technical offensive security team;
- Overseeing the testing of critical applications, environments, and technologies at the direction of senior leadership;
- Identifying/engineering/pushing strategic change to enhance security posture based upon findings and lessons learned from Offensive Security operations, as well as lessons learned from Incident Response;
- Automating repeatable offensive security tasks and tests moving from an engagement based model to a continuous validation approach;
- Identifying gaps and continuously improving detection and monitoring capabilities;
- Working with key stakeholders to implement remediations and address root causes for discovered security issues;
- Demonstrating extensive experience in conducting penetration testing and red team assessments;
- Demonstrating experience building successful offensive security teams;
- Using advanced knowledge of tactics, techniques, and procedures utilized by threat actors with the ability to replicate across various technologies;
- Developing custom tooling to support offensive security assessments;
- Demonstrating ability to identify novel attack techniques;
- Demonstrating knowledge in computer networking, operating systems (both Windows and Unix based operating systems), virtualization (cloud and on-premise), and modern architecture (containers, orchestration, CI/CD, etc);
- Demonstrating ability performing offensive security assessments against Azure, AWS, and GCP environments;
- Understanding and application of the Cyber Kill Chain Framework, MITRE ATT&CK, and other industry frameworks;
- Performing penetration testing and red team assessments internationally with consideration for local regulations and compliance requirements;
- Acting with integrity, empathy, and diligence as a leader of first line managers, analysts, and other team members to drive best case outcomes;
- Excelling in establishing robust relationships with stakeholders and colleagues to socialize and implement change;
- Possessing a strategic clarity of vision for coaching and motivating effective teams;
- Utilizing proven written & verbal communication, including proper use of escalation, influence, briefings, and presentations; and,
- Possessing the ability to explain technical security issues to senior leadership with a focus on the impact and importance to the business.
This is a U.S. based role and PwC IT Services (US) LLC does not intend to hire external job seekers who will need, now or in the future, PwC IT Services (US) LLC sponsorship through the H-1B lottery. All qualified applicants will receive consideration for employment at PwC IT Services (US) LLC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC IT Services (US) LLC is proud to be an affirmative action and equal opportunity employer.
Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified) Required Skills Optional Skills Desired Languages (If blank, desired languages not specified) Travel Requirements Available for Work Visa Sponsorship? Government Clearance Required? Job Posting End Date All qualified applicants will receive consideration for employment at PricewaterhouseCoopers ITServices (US) LLC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PricewaterhouseCoopers ITServices (US) LLC is proud to be an affirmative action and equal opportunity employer. Please note that, at this time, to be in-person at a PwC office, client location or PwC-sponsored events, you must be fully vaccinated against COVID-19. PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: All qualified applicants will receive consideration for employment at PwC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC is proud to be an affirmative action and equal opportunity employer. Apply Job!