A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe. Our Cyber Defense team focuses on helping our clients design and implement an effective cybersecurity program and technologies that protect against threats, support business objectives, and enables growth. As businesses move to a digital world, more data is generated and shared among organisations, partners and customers; to have business value, that data needs to be protected. You'll play an integral role in helping our clients ensure they are protected by developing solutions focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats. In joining, you'll be a part of a team that values technical and business acumen and provides training and development to extend and develop your skills, while fostering a strong collaborative culture. You'll have the opportunity to help organisations design and create sustainable security solutions at enterprise scale, through a focused approach on enterprise requirements and prioritisation, information technology security architecture, and the software development lifecycle.

• Use feedback and reflection to develop self awareness, personal strengths and address development areas.
• Delegate to others to provide stretch opportunities and coach to help deliver results.
• Develop new ideas and propose innovative solutions to problems.
• Use a broad range of tools and techniques to extract insights from from current trends in business area.
• Review your work and that of others for quality, accuracy and relevance.
• Share relevant thought leadership.
• Use straightforward communication, in a structured way, when influencing others.
• Able to read situations and modify behavior to build quality, diverse relationships.
• Uphold the firm's code of ethics and business conduct.

• Computer networking concepts and protocols, and network security methodologies;
• Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy;
• Common regulatory requirements such as OCC HS, FFIEC, GLBA, NY DFS, GDPR etc. as well as industry frameworks such as ISO 27001/2, NIST CSF, COBIT, ISO, and PCI;
• Database systems and data backup and recovery;
• Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration;
• Enterprise Cloud solutions across IaaS, PaaS & SaaS, such as AWS, Azure, OpenStack, Cloud Foundry, Salesforce, Microsoft Office 365, Box etc.;
• Enterprise security and Cloud security specific solutions such as IAM/IdaaS, CASB, Identity Governance, Cloud SOC/SIEM, Key Management & Encryption, Public, Private and Hybrid cloud solutions;
• Systems security testing and evaluation methods;
• Network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth);
• Network security implementations (e.g., host-based IDS, IPS, access control lists), including their function and placement in a network;
• Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications;
• Current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities; and,
• Application Security Risks (e.g. Open Web Application Security Project Top 10 list).

• Develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities;
• Translate data and test results into evaluative conclusions;
• Function in a collaborative environment, seeking continuous consultation with other analysts and specialists -both internal and external to the organization-to leverage analytical and technical specialization;
• Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation);
• Understand the basic concepts and issues related to cyber and its organizational impact
• Produce technical documentation;
• Apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth);
• Apply system design tools, methods, and techniques, including automated systems analysis and design tools;
• Operate common network tools (e.g., ping, traceroute, nslookup);
• Interpret and translate customer requirements into operational capabilities; and,
• Develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.