Cyber - Vulnerability Management - Senior Associate-Operate

Not Applicable Managed Services Senior Associate At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In cybersecurity incident management at PwC, you will focus on effectively responding to, and mitigating, cyber threats, maintaining the security of client systems and data. You will be responsible for identifying, analysing, and resolving security incidents to minimise potential damage and protect against future attacks.

• Respond effectively to the diverse perspectives, needs, and feelings of others.
• Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems.
• Use critical thinking to break down complex concepts.
• Understand the broader objectives of your project or role and how your work fits into the overall strategy.
• Develop a deeper understanding of the business context and how it is changing.
• Use reflection to develop self awareness, enhance strengths and address development areas.
• Interpret data to inform insights and recommendations.
• Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firms code of conduct, and independence requirements.

• Qualification BE / B Tech / ME / M Tech / B.SC / B.Com / BBA

• Candidate should be willing to work in IST/EST shift timing.
• Demonstrates experience driving the configuration of vulnerability assessment tools, including the integration of feedback from IT owners to reduce false positives.
• Demonstrates experience performing analysis and prioritization of identified vulnerabilities and remediation recommendations.
• Demonstrates experience preparing vulnerability data and reports for technical and executive audiences.
• Demonstrates experience identifying timelines/programs and guiding teams to address vulnerabilities, including system patching, deployment of specialized controls, code or infrastructure changes, changes in build engineering processes.
• Demonstrates experience tracking and remediation of vulnerabilities leveraging agreed upon action plans and timelines with responsible technology partners and support teams.
• Demonstrates experience designing and overseeing actionable dashboards and scorecards.
• Demonstrates experience reviewing and coordinating changes to patch policies, procedures, standards and audit work programs in a continuous improvement model.
• Demonstrates experience driving the protection of valuable information and maintaining confidentiality and integrity of data through knowledge of security management, network protocols, data, application security solutions.
• Demonstrates knowledge of industry trends, including current and emerging risks.
• Demonstrates knowledge of relevant legislation, regulatory requirements, guidelines, and industry developments related to data protection, privacy, security, and data governance.
• Demonstrates experience with end to end Vulnerability Management processes and tools including host based applications scanners, patch management, GRC tools and ITSM.
• Demonstrates knowledge of operating system and application security, administration and debugging.
• Demonstrates knowledge of security controls including access controls, auditing, authentication, encryption, integrity, physical security and application security and Vulnerability Management tools, like Qualys, Tenable, Nessus.

• Use feedback and reflection to develop selfawareness, personal strengths and address development areas.
• Delegate to others to provide stretch opportunities and coach to help deliver results.
• Develop new ideas and propose innovative solutions to problems.
• Use a broad range of tools and techniques to extract insights from current trends in the business area.
• Review your work and that of others for quality, accuracy and relevance.
• Share relevant thought with leadership.
• Use straightforward communication, in a structured way, when influencing others.
• Able to read situations and modify behavior to build quality, diverse relationships.

Degrees/Field of Study required Degrees/Field of Study preferred Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Communication, Creativity, Cybersecurity Framework, Cybersecurity Governance, Cybersecurity Risk Management, Cybersecurity Strategy, Cyber Security Threat Mitigation, Cyber Threat Intelligence, Digital Forensics, Embracing Change, Emotional Regulation, Empathy, Firewall (Network Security), Forensic Investigation, Incident Management, Incident Remediation, Incident Response Plan, Inclusion, Intellectual Curiosity, Learning Agility, Log Analysis {+ 15 more} No No