Business Information Security Officer
About the team
If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so.
The CISO pillar within NIS is responsible for the following services:
About the role
The Business Information Security Officers (BISO) focus upon 4 core areas:
NIS Service Interface
Each of these areas work together to successfully support member firm Information Security Officers (ISOs) and their staffs in the implementation of the PwC Information Security Policy (ISP).
Core skills within the BISO Services Team consist of:
Conduct analysis of Line of Service needs in order to make appropriate decisions for the implementation of NIS global security strategy;
Engage with Line of Service stakeholders to assess security threats/vulnerabilities and manage business risk;
Facilitate line of service support from Security Architecture, Engineering, Innovation, and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;
Assess service availability, adoption rates, and maturity to manage risk to business programs and processes;
Govern lines of service for compliance with PwC’s Information Security Policy (ISP) and legal/regulatory frameworks; and
Engage with Global IT and Applications to review security controls against ISP.
Essential skills and experience
Individuals selected for this role are expected to have both extensive knowledge and managerial know-how related to the following aspects of the CISO pillar skills matrix:
Experience managing multi-function relationships throughout major transformation;
Understanding of security technology;
Experience in a role balanced between business stakeholders and a central service organization;
Navigating a multifaceted, matrix organization; and
- Collaborating with multiple stakeholders across functional and technical skillsets.
- Analytical: Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.
Technical: Broad understanding of security technology.
Business: High level understanding of PwC’s business model, service offerings, and business operating environment as it pertains to the firm’s threat landscape. Ability to frame threats and exposures in a business context recognized by non-technical staff and executives.
Domain landscape: Knowledge of assurance and technical security principles
Communication: Ability to leverage business communication skills to inform, persuade, and teach stakeholders across a global network of member firms’ staff and leadership to enable effective information security activities and processes in line with the cyber readiness program
If you love the business side of information security this is the place to be. Within CISO pillar we work closely with member firm stakeholders to understand their business model and roadmap for technology. In turn CISO pillar outline the roadmap for NIS and drive engagement and adoption of central security services in line with the PwC Cyber Readiness program. Management of relationships between NIS and the business is key to delivering the cyber readiness mission. Whether it be integrating solutions, driving operational processes or providing guidance back to NIS to further enhance our strategy, CISO pillar provide the engagement and personal touch to enable NIS to deliver maximum value to the customer, the PwC Network of firms.
Who we’re looking for