PwC

Cyber Manager, Risk Assurance Services

Saint Peter Port Full time

Line of Service

Assurance

Industry/Sector

FS X-Sector

Specialism

Assurance

Management Level

Manager

Job Description & Summary

At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls.

Those in internal audit at PwC help build, optimise and deliver end-to-end internal audit services to clients in all industries. This includes IA function setup and transformation, co-sourcing, outsourcing and managed services, using AI and other risk technology and delivery models. IA capabilities are combined with other industry and technical expertise, in areas like cyber, forensics and compliance, to address the full spectrum of risks. This helps organisations to harness the power of IA to help the organisation protect value and navigate disruption, and obtain confidence to take risks to power growth.

Role: Cyber Manager, Risk Assurance Services

Location: Guernsey or Jersey

Line of Service: External Audit

Grade: Manager

Contracted Hours per Week: 37.5/hours for role

PwC Channel Islands Overview

At PwC CI, we help you build, accelerate, and sustain momentum in a world that never stops moving. With our tech-forward and people-empowered network, we provide expert assurance, tax and advisory services to turn challenges into opportunities. Leveraging deep expertise and advanced capabilities, we ensure you’re ready for any future, helping you act boldly and achieve real results.

Risk Assurance Services

Our team focuses on helping our clients manage cyber risk on a domestic and global scale. You’ll work with our clients aligning a number of different cyber, privacy and industry frameworks and requirements to their business. These include, but are not limited to: NIST CSF, ISO27001, ISO27005, ISO22301, COBIT, ITIL, NCSC, MCSS, CCM, PCI-DSS, SWIFT CSP, GDPR, NIS-D, etc. Our team designs, implements, and maintains effective cyber programs that help our clients manage the risks and regulatory compliance obligations, as well as control framework commitments to their Board/stakeholders.

We help our clients across the domains of identify, protect, detect, respond and recover by working closely with PwC UK to deliver operationally critical Managed Cyber Defence and Identity Management services.

Job Summary:

A career in our Risk Assurance practice as a Cyber Manager will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resiliency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy, and Risk Assurance professionals at PwC, but at our clients and industry analysts across the globe. You will be part of a team that not only assesses organisational compliance but helps clients implement solutions and strategically think through the best way to manage in a cost-effective, yet defensible manner.

Responsibilities:

As a Manager, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

  • Pursue opportunities to develop existing and new skills outside of comfort zone.
  • Act to resolve issues which prevent effective team working, even during times of change and uncertainty.
  • Coach others and encourage them to take ownership of their development.
  • Analyse complex ideas or proposals and build a range of meaningful recommendations.
  • Use multiple sources of information including broader stakeholder views to develop solutions and recommendations.
  • Address sub-standard work or work that does not meet firm's/client's expectations.
  • Develop a perspective on key global trends, including globalisation, and how they impact the firm and our clients.
  • Manage a variety of viewpoints to build consensus and create positive outcomes for all parties.
  • Focus on building trusted relationships.
  • Uphold the firm's code of ethics and business conduct.

Direct Reports:

  • This role reports to:
    • Senior Manager, Director, Head of Risk Assurance Services

  • Reporting to this role:
    • Senor Associates
    • Associates

Qualifications & Certifications:

Minimum Degree Required:
Bachelor Degree, preferably Information Technology related

Minimum Years of Experience:
5 year(s)

Certification(s) Preferred:

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), ISC2 Certified Information Systems Security Professional (CISSP), ISACA Certified in Risk and Information Systems Control (CRISC)

Skills & Experience Required:

Demonstrates extensive knowledge and/or a proven record of success in:

  • Providing industry-leading practices in cyber risk management and regulatory compliance.
  • Leveraging knowledge of common regulatory requirements as well as industry frameworks such as NIST CSF, ISO27001, COBIT, COSO and PCI.
  • Managing and overseeing large projects involving information security, technology risk management, cybersecurity or cyber risk management.

Demonstrates extensive abilities and/or a proven record of success in:

  • Designing and implementing enterprise-wide cyber risk governance frameworks.
  • Developing detailed business risk scenarios and cyber threat models.
  • Assessing enterprise-wide business risks and cyber threats.
  • Designing and implementing cyber risk management controls.
  • Monitoring and reporting of cyber risks, threats and vulnerabilities.
  • Designing KRIs and metrics to build risk reports for management.
  • Developing, implementing and testing cyber resiliency plans.
  • Using tools and technology to provide data analytics and business intelligence on cyber threats, risk and vulnerabilities.
  • Developing cyber risk management strategies and operating models for clients.
  • Building and operationalising complex cybersecurity and cyber risk management programs for clients.
  • Preparing concise and accurate documents, leveraging and utilizing MS Office and Google Suite to complete related project deliverables.
  • Managing project financials in line with agreed-upon budgets.
  • Creating a positive working environment by monitoring and managing workloads of the team – balancing client expectations with the work-life quality of team members.
  • Keeping leadership and engagement management informed of progress and issues.

Travel Requirements:

Up to 25%.

The skills we look for in our people:

All our people need to demonstrate the skills and behaviours that support us in delivering our business strategy. This is important to the work we do for our business, and our clients. These skills and behaviours make up our global leadership framework, Evolved PwC Professional.

The Evolved PwC Professional focuses on two core behaviours: Trusted Leadership and Distinctive outcomes. Trusted Leadership is underpinned by core behaviours that Inspire, Empower and Evolve, and Distinctive outcomes is underpinned by behaviours that Champion, Build and Deliver.

Diversity:

We work in a changing world which offers great opportunities for people with diverse backgrounds and experiences. We seek to attract and employ the best people from the widest talent pool as well as those who reflect the diverse nature of our society. We aim to encourage a culture where people can be themselves and be valued for their unique strengths. Creating value through diversity is what makes us strong as a business. https://pwc.to/2vY6KZm.

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Accounting and Financial Reporting Standards, Active Listening, Analytical Thinking, Artificial Intelligence (AI) Platform, Auditing, Auditing Methodologies, Business Process Improvement, Coaching and Feedback, Communication, Compliance Auditing, Corporate Governance, Creativity, Data Analysis and Interpretation, Data Ingestion, Data Modeling, Data Quality, Data Security, Data Transformation, Data Visualization, Embracing Change, Emotional Regulation, Empathy, Financial Accounting {+ 29 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Up to 20%

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

Yes

Job Posting End Date