Cyber Security (Governance) Associate/Senior Associate

PwC, our purpose is to build trust in society and solve important problems.

We’re a network of firms in 151 countries with more than 295,000 people who are committed to delivering quality in assurance, advisory and tax services.

PwC has been providing services to the Turkish business world since 1981, with a professional staff of 2.000 in İstanbul, Ankara, Bursa and İzmir, we provide services to create the value that our clients look for.

If you share our values & aspirations, we want to meet you.

So, take this opportunity of a lifetime and join us. We'll help you reach your full potential.

What is in PwC for you?

Your career is just that; yours. You choose it. You live it. You make it happen. To get the best from it, you need the best opportunities. That’s why opportunities are at the heart of a career with us.

What you will find in PwC;

• Continuous learning
• Training and development opportunities for your future career
• Global mobility opportunities in various PwC offices worldwide
• Commitment to diversity and inclusion

What are we looking for?

Ideally, you will have experience with a globally recognized professional services firm or large corporations with industry experience in four or more of the following areas

• General knowledge of IT practices and standards, security risks and controls in the areas of security and IT, and IT control frameworks; Experience on one of the standards is a plus: ISO/IEC 27001, COBIT, NIST CSF, Information Security Regulations of SPK/BDDK
• Knowledge of one or more Data Privacy regulations and how it translates to product / technical functionality
• Any of the relevant technical and/or information security certifications such as ISO 27001 LA, CISA is preferred
• Proven ability to perform multiple tasks in a dynamic and constantly changing environment;
• Superior abilities recognized for analysis, conceptualization and problem solving;
• Ability to work alone or in a team;
• Abilities in setting priorities and solving problems.
• Strong written and verbal communication skills, as well as interpersonal skills, with a focus on rapport-building, listening, and questioning skills
• Having experience with security solution concepts such as Data Loss Protection, Firewalls, SIEM, MDR, NAC and relevant tools is a plus
• Having knowledge about OT/ICS security environment, concepts, technologies and tools is a plus
• Having knowledge about new generation technologies such as blockchain security and Artificial Intelligence (AI) security and relevant concepts is a plus
• Having experience in performing or data discovery methods and tools is a plus
• A positive attitude with an eagerness to learn and develop professional knowledge.

Role Description

As an Associate, you’ll work as part of a team of problem solvers with extensive consulting and industry experience, helping our clients solve their complex business issues from strategy to execution. Specific responsibilities include but are not limited to:

• Analyze client IT environment, identify risks and evaluate controls
• Assess and implement information security management frameworks based on well-known industry standards (e.g. ISO 27000 series, CCM, NIST, COBIT)
• Develop client Information Security strategy plans in alignment with business requirements using a risk-based approach
• Perform information security awareness training and training program development for clients
• Manage client expectations and program implementation plans attending stakeholders' needs using project management principles
• Keep up to date with the latest security trends and also applicable privacy laws that could have an impact on clients
• Advise on data security governance and solutions related to KVKK and GDPR
• Act as enabler with clients that desire to move towards compliance status, especially under controls and requirements from the new general data protection regulation
• Translate the flow of personal data in accordance with the Privacy regulations based upon an enterprises business processes and IT systems
• Review his/her own work and that of others for quality, accuracy and relevance.

--

PwC Türkiye şirketleri* olarak elektronik ortamda toplanan kimlik, iletişim, özgeçmiş ve CV’niz’de yer alan kişisel verilerinizi iş başvurusu süreçlerinin yürütülmesi amacıyla KVKK m. 5/2 (f) uyarınca, hukuki ihtilaf oluşması halinde yasal süreçlerin yürütülebilmesi amacıyla KVKK m. 5/2 (e) uyarınca işleyeceğiz. Kişisel verilerinizi mevzuattan dolayı kişisel verilerinizin paylaşılmasının zorunlu olduğu hallerde, ilgili ve yetkili kamu kurum ve kuruluşlarıyla KVKK m. 5/2 (ç) uyarınca paylaşabiliriz. Kişisel verilerinin KVKK m. 9 uyarınca merkezi yurt dışında bulunan Google sistemleri üzerinden işlenecektir. KVKK’nın 11. Maddesi kapsamındaki haklarınızı https://www.pwc.com.tr/tr/hakkimizda/pwc-turkiye-kvk-basvuru-formu.pdf linkinde bulunan Başvuru Formu ile veya [email protected] adresine, veya [email protected] adresine iletebilirsiniz.

*PwC Türkiye şirketleri; PwC Danışmanlık Hizmetleri A.Ş. & PwC Bağımsız Denetim ve Serbest Muhasebeci Mali Müşavirlik A.Ş. & PwC Yeminli Mali Müşavirlik A.Ş. & PwC Yönetim Danışmanlığı A.Ş., PwC Serbest Muhasebeci Mali Müşavirlik Ltd. Şti., Gago Türkmen Avukatlık Ortaklığı