ac manila - cyber Security analystPwC

Line of Service Assurance
Industry/Sector Not Applicable
Specialism Cybersecurity & Privacy
Management Level Associate
Job Description & Summary A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe.
Our Advisory Acceleration Center is the natural extension of PwC's leading class global delivery capabilities. We provide premium, cost effective, high quality services that support process quality and delivery capability in support for client engagements.
To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be an authentic and inclusive leader, at all grades/levels and in all lines of service. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.
As an Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:
Invite and provide evidence-based feedback in a timely and constructive manner.
Share and collaborate effectively with others.
Work with existing processes/systems whilst making constructive suggestions for improvements.
Validate data and analysis for accuracy and relevance.
Follow risk management and compliance procedures.
Keep up-to-date with technical developments for business area.
Communicate confidently in a clear, concise and articulate manner - verbally and in written form.
Seek opportunities to learn about other cultures and other parts of the business across the Network of PwC firms.
Uphold the firm's code of ethics and business conduct
Additional Job Description
As a Digital Trust Analyst, you will be working collaboratively with the team to advise our clients in managing cyber security risk and compliance across a range of leading cloud products and services. You will have an opportunity to develop your skills and deliver projects across a broad range of technical, security, risk, and compliance-related domains. You will:
Work on cloud and cyber security risk related projects on one or more leading cloud platforms in the IaaS (e.g., AWS, Azure, GCP, AliCloud, Huawei Cloud, etc.) or SaaS (e.g., Office 365, Google Workspace, Salesforce, etc.) space.
Support in discussions with business and technology stakeholders to help develop and refine their cloud strategy in order to streamline their cloud journey and enable a secure and compliant cloud environment.
Build trusted and sustainable relationships with clients through various engagements across industries and sectors such as financial services, technology, telecommunications, and government/public sector.
Support our clients in their design, development, and assessment of cloud architecture (networks, operating systems, databases, middleware, applications, etc.) and the associated security architecture (e.g., XDR, SIEM, SOAR, Cryptographic solutions, IDAM, etc.).
Leverage various industry standards and frameworks (e.g., CSA CCM, NIST CSF, ISO 27001, CIS, etc.), regulatory guidelines (e.g. MAS TRM, MTCS, ABS Cloud Guidelines, etc.), reports (e.g., OSPAR, SOC reports, etc.) and PwC's Cloud Trust Framework.
Advise clients on designing more effective, efficient cloud security operations capabilities across a range of areas such as application security, identity and access management (IAM), privileged access management (PAM), incident response, cryptographic key management, backup & recovery, third-party risk management, and others.
Work with clients to develop/enhance their Dev(Sec)Ops capabilities to build scalable, robust, high performing, fault-tolerant, and secure software solutions using CI/CD (Continuous Integration Continuous Delivery) toolsets and automation.
Advise and/or engineer cloud orchestration and automation in cloud environments using tools such as Terraform, Ansible, and Puppet.
Support or lead (where applicable) technical workstreams, drawing on your knowledge and experience to support your teammates through knowledge sharing and providing on-the-job coaching where possible
Essential Requirements:
At least 1 - 3 years of experience working in one or more of the following disciplines: cyber security, technology risk management, cloud/IT advisory and implementation, cloud or security software product development, security operations, or IT regulatory compliance
Professional certification in one or more areas of cloud, cyber security, technology risk management, IT audit, or architecture such as CISSP, CRISC, CISM, CCSP, CISA, CCSK, CCAK, or TOGAF would be beneficial
Associate level certification in cloud technologies for one cloud (IaaS, PaaS, and SaaS) service providers like AWS, Azure, GCP, AliCloud, or Huawei Cloud
Preferred Experience/Skills:
It is beneficial for candidates to have some exposure to or interest in a range of diverse technology, security concepts, tools, and methodologies, with some specific areas of focus/expertise. These may include:
Amazon AWS, and services such as EC2, S3, RDS, R53, AWS Direct Connect.
Microsoft Azure, and services such as VM, SQL DB, Blob Storage, Azure ExpressRoute
Google Cloud Platform, and services such as GCE, Cloud SQL, Google Cloud Dedicated Interconnect.
Identity and Access Management (IAM) and Privileged Access Management (PAM)
Application Security frameworks and standards such as OWASP
Security Operation
Logging and monitoring, and SIEM suites/associated tools
Networking (hardware, software, routing, firewalls, VPC, SASE)
Operating Systems (Windows, UNIX, Linux)
Containerization (Kubernetes/K8, Docker)
Application Management such as Elastic Beanstalk, App Engine.
Database / Data Warehouse such as SQL, NoSQL, Columnar, Graph.
Encryption and Cryptographic Key-Management
High Availability architecture, data backup and recovery
DevSecOps, CI/CD (Continuous Integration Continuous Deployment), and associated tools such as Terraform, Jenkins, Ansible, Chef, Puppet, Salt stack, etc.
DevSecOps Automation tools such as Boto3, Lambda, Azure Functions, Google Functions, Python, JSON.
Knowledge of programming or scripting languages such as Python, Node.js.
Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required:
Degrees/Field of Study preferred: Bachelor Degree - Information Technology, Bachelor Degree - Computer Science, Bachelor Degree - Computer Engineering
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Desired Languages (If blank, desired languages not specified) English
Travel Requirements 0%
Available for Work Visa Sponsorship? No
Government Clearance Required? No
Job Posting End Date
PwC

Pasig City, Metro Manila
Permanent
Full-time