IT Services- Application Security Architect Senior Manager

PwC • Cincinnati, OH

2d

About The Position

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. Those in application security at PwC will be responsible for providing security services to development teams including code scanning, readiness testing, and penetration testing to enable application teams to build and deploy secure applications in Production. You will utilise a risk-based methodology and "shift-left" approach to engage early in the software development lifecycle. Growing as a strategic advisor, you leverage your influence, expertise, and network to deliver quality results. You motivate and coach others, coming together to solve complex problems. As you increase in autonomy, you apply sound judgment, recognising when to take action and when to escalate. You are expected to solve through complexity, ask thoughtful questions, and clearly communicate how things fit together. Your ability to develop and sustain high performing, diverse, and inclusive teams, and your commitment to excellence, contributes to the success of our Firm. Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Craft and convey clear, impactful and engaging messages that tell a holistic story. Apply systems thinking to identify underlying problems and/or opportunities. Validate outcomes with clients, share alternative perspectives, and act on client feedback. Direct the team through complexity, demonstrating composure through ambiguous, challenging and uncertain situations. Deepen and evolve your expertise with a focus on staying relevant. Initiate open and honest coaching conversations at all levels. Make difficult decisions and take action to resolve issues hindering team effectiveness. Model and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements. This position will be part of PwC IT Services (US) LLC, a member of the PwC network of firms. PwC IT Services (US) LLC (a wholly owned subsidiary of PwC IT Services Limited) provides technology services to other PwC member firms. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see www.pwc.com/structure for further details. The Opportunity As part of the Cybersecurity team, you will lead the charge in enhancing application security and driving innovative solutions. As a Senior Manager, you will serve as a strategic advisor, leveraging your knowledge to deliver quality results while securing operational excellence in client interactions.

Requirements

• High School Diploma
• At least 6 years of experience

Nice To Haves

• Bachelor's Degree preferred
• Certifications in CISSP, CISM, CISA, CCIE, CCNA, CCNP and CCSA preferred
• Demonstrating knowledge of application security solutions
• Analyzing application security vulnerabilities and executing processes
• Collaborating with teams to enhance application security
• Interacting with project management on application projects
• Implementing strategies for vulnerability review and remediation
• Identifying complex business cases for security solutions
• Monitoring vendor application development processes
• Possessing knowledge and experience with application security solutions and web hosting architecture and principles
• Leveraging experience with Software development including web, mobile applications and development languages
• Having experience with commercial Source Code Analysis/Static Application Security Testing Tools
• Understanding of application source code vulnerability mitigation processes
• Recognizing risk assessment/acceptance factors that can affect business and security decisions
• Having knowledge of and experience with Business processes and drivers that can affect system design
• Analyzing application security vulnerabilities and executing mitigation strategies
• Leveraging review processes using application threat vulnerability tools, scanning techniques and/or code review results
• Using assessments of vulnerabilities, sources of threats, and current security guidance to determine the effectiveness of mitigation plans
• Collaborating with teams to identify opportunities and provide recommendations on how application security can be built into project development
• Interacting with project management team members and key stakeholders on application projects
• Reviewing application threat vulnerability assessments on application development projects
• Implementing strategy for application threat vulnerability review and remediation
• Identifying and documenting complex business cases to assist in gaining internal support to implement security solutions
• Collaborating with team members and stakeholders virtually
• Evidencing communication skills, both written and verbal
• Having customer service experience/skills
• Multitasking and possessing time management skills
• Possessing analytical skills and attention to detail.
• Secure Software Development Lifecycle (Secure SDLC)
• Tools & Automation
• Threat Modeling and Risk Assessment Technologies
• Cloud-Native Application Security
• AI, GenAI & Machine Learning Security
• API Security & Modern Connectivity
• Observability, Monitoring & Incident Response in Application Security
• Identity and Access Management (IAM) & Authentication
• Quantum-Resistant Cryptography (Emerging)

Responsibilities

• Lead initiatives to enhance application security across various platforms
• Develop creative solutions that address client needs and industry challenges
• Serve as a trusted advisor to clients, securing quality service delivery
• Collaborate with cross-functional teams to drive operational excellence
• Analyze security risks and implement impactful mitigation strategies
• Foster a culture of continuous improvement within the cybersecurity team
• Communicate complex technical concepts clearly to stakeholders
• Stay updated on industry trends and emerging technologies

Benefits

• We offer a comprehensive, flexible and competitive benefits program. It provides access to programs that can be tailored to meet the personal health and financial well-being needs of our employees and their families. Our benefits include medical, dental and vision coverage, health savings accounts; mental health support, family and caregiver support, a robust time off policy inclusive of sick, vacation and holiday time; and a retirement savings plan with Roth features and company match.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: High school or GED
• Number of Employees: 5,001-10,000 employees