Security Architect

Role: Security Architect

Location: Remote (Poland)

Contract Position

Shift timings: Shift will be based on US Shift timings

Business Area blurb:

A career in Information Security, within Internal Firm Services, will provide you with the opportunity to develop and support our internal security technologies and services across the entire global and local PwC network. You’ll focus on cloud and application security strategy and be at the forefront of designing, developing, and implementing information technology including hardware, software, and networks that enhances security of internal information and protects our firm 's intellectual assets.

The Application Security team own following tasks:

● Definition of application landscape & creation of application risk register across the PwC Network of firms

● Utilization of application security tools for scanning applications for common application security risks

● Engagement with development teams to articulate complex application security risks

● Continual engagement throughout the software development lifecycle (SDLC) to identify, track & reduce application security risks across new applications

● Assessment of application security vulnerabilities across the existing application landscape.

● Plan & prioritize application security vulnerabilities & develop structured remediation plan

● Engaging stakeholders in ISRC to ensure technical vulnerabilities that cannot be remediated are managed & mitigating controls are developed to reduce the risk of said vulnerability within the business environment.

● Define, communicate and drive the Application Security vision and strategy across the PwC Network of firms.

As a Cloud and Application Security Architect, responsibilities will include but are not limited to;

● Act to resolve issues which prevent the team working effectively. Coach others, recognise their strengths, and encourage them to take ownership of their personal development.

● Analyze complex ideas or proposals and build a range of meaningful recommendations.

● Use multiple sources of information including broader stakeholder views to develop solutions and recommendations. Use data and insights to inform conclusions and support decision- making.

● Develop a point of view on key global trends, and how they impact clients.

● Help define and roadmap the strategic vision of agile product creation and delivery through centralized and commoditized services using automation.

● Manage a variety of viewpoints to build consensus and create positive outcomes for all parties.

● Simplify complex messages, highlighting and summarizing key points.

● Uphold the firm 's code of ethics and business conduct.

Skills & Experience

● Background engaging business & technology stakeholders at all levels to gather long term goals & requirements

● Background mapping long term business requirements to complex security architecture frameworks.

● Understanding of how to design & build security technology solutions aligned to a global central service environment

● Understanding of security technology at an enterprise & solution level

● Hands on engineering experience with enterprise security technology both on-prem, private and public cloud

● Knowledge of designing, building and deploying cloud solutions with a focus on security across AWS, Azure or GCP.

● Proven track record of working to transition technology from a local focus to a central technology service organization - using capability matrix and self service concepts

● Background working in a complex, matrix organization and with multiple stakeholders across functional and technical skill sets