Sunday, December 23, 2012

Risk Assurance ITPA IT Risk & Security Manager (PHI) at PwC


Are you interested in the opportunity to work for an industry-leading firm that services Fortune 500 companies, and will give you the experience and exposure you need to build your career? If you are, then PricewaterhouseCoopers LLP (www.pwc.com/us) is the firm for you. PricewaterhouseCoopers LLP (PwC US) is well placed to help clients meet the challenges and opportunities of the US marketplace in the areas of assurance, tax, and advisory. We offer the perspective of being part of a global network of firms combined with detailed knowledge of local, state and US national issues. More than 169,000 people in over 158 countries across the PwC network are committed to deliver quality in assurance, tax and advisory services. People across the PwC network share knowledge, experience and solutions to develop fresh perspectives and deliver practical advice.

At PwC US, you will be part of a learning culture, where teamwork and collaboration are encouraged, excellence is rewarded, and diversity is respected and valued. We offer a flexible career progression model that allows for a variety of challenging opportunities throughout your career. We provide unparalleled coaching, mentoring, and career development programs; global opportunities; and state of the art technology-driven methodologies to help you provide quality service to our clients.

Our Assurance practice collaborates with clients, so that the financial information they report to the investing public and other stakeholders is clear and reliable. When we fulfill our role as Assurance professionals, by standing firm on quality and integrity, we have a direct impact on how well the world's capital market system functions.

The highly trained and educated Assurance teams go inside companies, and get to know those businesses. They ask questions, test assumptions, and provide assurance that the companies are reporting information on which investors and others can rely. Every assignment is an exciting opportunity to learn, to grow and to understand how businesses operate from all levels and perspectives.

Our Assurance professionals are constantly challenged to learn more in order to provide our clients with the highest quality services. This learning takes place through interaction on the job with colleagues and clients, formal training programs, and the insights provided by mentors and coaches. PwC is all about our people, encouraging high performance and quality. Join us and we will help you implement a successful career strategy, as you explore the many career opportunities in PwC Assurance.

Job Description: For companies today, everything is fast paced. The speed at which technology advances is incredible. While there's non-stop regulatory reform, moves are also underway to deregulate and company stakeholders increasingly demand transparency and accountability. Meanwhile, emerging markets and continued economic uncertainty add to an already risky business environment.

From the boardrooms to the back offices, we work with companies to deliver company controls that help them protect and strengthen every aspect of their business from people to performance, systems to strategy, and business plans to business resilience.

PwC’s Risk Assurance (RA) practice is composed of more than 2,300 resources with significant industry and technical expertise in a broad range of risk and compliance issues.

We help companies achieve the confidence needed for strong three lines of defense on risk by:

-Building and fortifying internal and IT risk controls
-Developing and strengthening risk and compliance programs
-Improving the capabilities of Internal Audit function

We draw proudly on our auditing heritage as well as our commercial experience to rigorously evaluate and implement a companies governance procedures, processes, information, and controls. We provide broad support across a business to elevate trust and transparency, protect the business and give all parties assurance that risks are fully anticipated, understood, and managed strategically.

1. IT Technical Risk Assurance: Assessing the enterprise against IT threats and risks through governance, compliance, identification, and validation. This includes:
- Performing IT Technical Risk Assessments
- Performing detailed assessments around:
- Information Security
- Technical Privacy
- Disaster Recovery
- Infrastructure
- Emerging technologies
- Secure systems development
- Technical Vendor Management
- Compliance with Industry and IT Regulations
- Providing technical audit resources to support IT Governance Assessments
2. Security Assurance: Assurance over the general activities and concerns of an organization’s security function including: governance, policy, control design, general operational effectiveness and internal controls. This includes:
- As part of an integrated model with Advisory the providing of Internal Audit, Third Party Assurance, External Audit support around an organizations IT Security:
- Security Governance and Compliance with various frameworks
- Security Risk Assessment
- Infrastructure Assessments
- Attack and Penetration
- Architecture and Technology Security Assessments
- Emerging Technologies
- Technical Privacy
3. IT Technical Audits: We provide deep technically skilled resources trained in assurance methodologies with a focus on our Internal Audit, Third Party Assurance , and External Audit clients. This includes conducting the following:
- Internal Audit
- Audit Technology Risk Assessments
- Technical resources to support IT Internal Audit outsourcing , co-sourcing, staff augmentation
- Provide technical assurance skills around IT and Security as listed on the left
- Third Party Assurance
- Technical support for SAS 70, AT101, SysTrust, WebTrust,
- External Audit
- Technical support on external audit clients

Position/Program Requirements: - Demonstrates proven success in a role that emphasizes managing various technical aspects of the following: IT Audits, IT Risk Management, Information Security and/or Technical Privacy.
- Demonstrates extensive knowledge of performing IT Risk & Security assessments, developing information security strategies, , and recommending security solutions to assist businesses with the assessment and improvement of their security infrastructure.
- Demonstrates extensive knowledge of assessing and recommending enterprise security solutions in adherence with industry security standards.
- Demonstrates extensive knowledge of understanding and/or directly managed through the common issues facing clients who provide products and services in several service sectors that include Financial Services, Manufacturing, Retail, Media and Entertainment, Technology, Energy, etc.
- Demonstrates extensive knowledge of with creating proposals and demonstrated business development efforts.
- Demonstrates direct experience as a consultant, auditor or Information Security leader in a professional services firm or large enterprise. This includes interfacing with clients on control solutions, as well as leading the planning and execution of projects, in the following areas: Information Security, Risk Management, Technical Privacy/Compliance, IT Security Audit, and / or IT Risk Management.
- Aspires to have a broad career in IT Risk & Security Assurance.

Skills Preferred:

- Demonstrates extensive abilities with the utilization of network and application security assessment tools and methodologies to manage and address security and control issues with the following technologies: UNIX, Windows Servers, databases (Oracle, SQL, DB2, etc), mainframe, firewalls, routers, wireless environments, mobile devices, and cloud computing.
- Demonstrates extensive abilities with performing information security, IT audits, risk assessments, network and application penetration testing and security assessments, intrusion detection, vulnerability/risk validation, and secure application development.
- Demonstrates extensive abilities to identify and address client needs: developing and sustaining extensive client relationships using networking, negotiation and persuasion skills to identify and sell potential new service opportunities; preparing and presenting complex written and verbal materials; and defining resource requirements, project workflow, budgets, billing and collection.
- Demonstrates thorough abilities success as a team leader: leading teams to generate a vision, establish direction and motivate members, create an atmosphere of trust, leverage diverse views, coach staff, and encourage improvement and innovation.
- Demonstrates extensive abilities with information security organizational and policy development, vulnerability management, risk assessment and IT Risk Management skills.


Min Year Exp:
5 years experience in IT Risk Management and/or IT Internal Audit including experience in Information Security & Technical Privacy.
Min Degree(s) and Certifications:
BA or BS Management Information Systems, Accounting, and / or business related field.
Obtained or demonstrates an active pursuit of one or more of the following certifications: Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) certifications, or other related certifications.

Company Description

The firms of the PwC network provide industry-focused assurance, tax and advisory services to enhance value for clients. More than 161,000 people in 154 countries in PwC firms across the PwC network share their thinking, experience and solutions to develop fresh perspectives and practical advice.

For more information see www.pwc.com.

"PwC" is the brand under which member firms of PricewaterhouseCoopers International
Limited (PwCIL) operate and provide services. Together, these firms form the PwC network. Each firm in the network is a separate legal entity and does not act as agent of PwCIL or any other member firm. PwCIL does not provide any services to clients. PwCIL is not responsible or liable for the acts or omissions of any of its member firms nor can it control the exercise of their professional judgment or bind them in any way.

Additional Information

Posted:
December 3, 2012
Type:
Full-time
Experience:
Not Applicable
Functions:
Finance 
Industries:
Accounting 
Employer Job ID:
32301BR-0
Job ID:
3752387

Popular Posts