Cybersecurity Strategy and Transformation Senior Manager

Pwc Canada•Toronto, ON

6d•CA$144,700 - CA$241,200•Hybrid

About The Position

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively. The Opportunity: As a Cybersecurity Strategy and Transformation Senior Manager, unlock your potential and embrace the chance to drive meaningful outcomes that’ll elevate your career. Your role will include, but isn’t limited to: Establish credibility and relationships with prospective clients by demonstrating technical and industry knowledge and identify opportunities for assistance. Liaise with client project teams to set and manage client expectations throughout each engagement. Manage the PwC project team so that deliverables meet with PwC’s quality standards and agreed-upon delivery timelines. Provide thought leadership and direction for the cyber risk management practice. Team with PwC colleagues in other practice areas in support of client needs for cyber risk management services. Contribute to the Intellectual Property of the firm by driving the development of toolkits, methodologies and accelerators. Assist in proposal, letters of engagement and statements of work writing.

Requirements

Bachelor or Master’s Degree in Information Security, Computer Science, Engineering or Business.
A firm understanding of cyber security frameworks such as those published by leading organizations (e.g. NIST, SANS, ISO etc.). Ability to translate framework to practical advice to clients.
Good mix of business and technical capabilities, and the ability to communicate on current cyber risk issues to senior executives within the context of their business.
Being able to design and deliver cyber security strategies, operating models, assessments and reports to meet Canadian, US and global regulatory requirements.
Leadership qualities when working in a team and the ability to be recognized as the subject matter expert on cyber risk when our client requires.
Ability to identify cyber risk management opportunities with clients and propose solutions that meet the client’s needs.
Clear, articulate and confident written and verbal communication skills.
Presentation and report writing skills.
Analytical and problem solving capabilities.
Ability to develop and manage mid-level relationships.
Good facilitation and delivery skills.
The ability to work on a number of projects, meet deadlines and manage stakeholder expectations.
A minimum of 8+ years in cybersecurity, with a focus on cyber risk management activities.

Nice To Haves

Technical designations such as CISSP, CRISC, CISA preferred.
An interest in upskilling for a digital world and technology trends, an openness to learning new tools and adapting how you work.

Responsibilities

Establish credibility and relationships with prospective clients by demonstrating technical and industry knowledge and identify opportunities for assistance.
Liaise with client project teams to set and manage client expectations throughout each engagement.
Manage the PwC project team so that deliverables meet with PwC’s quality standards and agreed-upon delivery timelines.
Provide thought leadership and direction for the cyber risk management practice.
Team with PwC colleagues in other practice areas in support of client needs for cyber risk management services.
Contribute to the Intellectual Property of the firm by driving the development of toolkits, methodologies and accelerators.
Assist in proposal, letters of engagement and statements of work writing.
Developing cyber risk strategies.
Identifying cyber risks and developing cyber risk registers.
Developing and maintaining cyber risk management and reporting frameworks.
Conducting various cyber risk assessments.
Developing and delivering comprehensive risk reports to provide detailed insights of the current state of its cyber risks.
Performing cyber threat modelling and business impact analyses to ensure cyber assets are adequately protected with proper cybersecurity measures and controls.
Managing cyber risk using GRC platforms.
Developing KRIs and determining how to measure and report on KRIs.
Collaborating with key client business stakeholders to facilitate cyber risk analysis and informed decision-making.
Ensuring that risk-based management decisions align with laws and regulations that are applicable to our clients.