Line of Service
Advisory
Industry/Sector
FS X-Sector
Specialism
Risk
Management Level
Senior Associate
& Summary
At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal controls, and other assurable information enhancing the credibility and reliability of this information with a variety of stakeholders. They evaluate compliance with regulations including assessing governance and risk management processes and related controls.
Those in internal audit at PwC help build, optimise and deliver end-to-end internal audit services to clients in all industries. This includes IA function setup and transformation, co-sourcing, outsourcing and managed services, using AI and other risk technology and delivery models. IA capabilities are combined with other industry and technical expertise, in areas like cyber, forensics and compliance, to address the full spectrum of risks. This helps organisations to harness the power of IA to help the organisation protect value and navigate disruption, and obtain confidence to take risks to power growth.
& Summary: IT Risk, Security & Control department covers cyber security strategy maintenance and tactical planning and operations to provide IT Security protection, governance, risk management and reporting. This includes promoting Head Office Information Security Standards and Procedures (ISSP) requirements and local security requirements. The department supports and monitors security solutions such as virus protection, vulnerability management, compliance monitoring and threat/incident management activities to reduce risk.
TheCyberarkPAM Technicalresourceis responsible for managementand support of the PAM estate.The rolemanagesthe execution ofproject/productcybersecurity elements across cross-portfolio programs andservices. Executionsinclude working with multiple security, IT andother leadershipstakeholders and a variety of security, IT and engineeringtechnical resources to identify,planand delivercybersecurity initiatives. Deliverables include, but are not limited to:
Tosupport thedelivery ofcyberprojectswithin agreed scope, cost and timescale.
Todeliver technical solutions across the Cyber security platform
To manageand work independently or as part of a team in delivering complex projects
Responsibilities:
For dual hat only:
In this role,youwill be responsible for xxx acrossXXXbanking arm and securities business under a dual-hat arrangement. Under this arrangement,youwill act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employsyou
In this role, you will be responsible for cybersecuritytechnicalproject deliveryacrossXXXbanking arm and securities business under a dual-hat arrangement. Under this arrangement, you will act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employs you. Key responsibilities include but, but not limited to:
Interpretecybersecurity relevant regulatory and other requirements or best practices and translate these to business aligned cybersecurityprogrammerequirements.
Manage the delivery ofcybersecurityprojectswithin agreed scope, cost and timescale across Bank and Securities.
Support of thedelivery of the cyber portion of allocated Cross Portfolio projectsincludingimplementation of cyber projects
Thetechnical resourcewill be responsible forsupport andexecution of the following deliverables as required:business requirements, technical design and architecture, engagement with other infrastructure teams,
Responsible for identifying and onboarding (DNA scan/Account discoverymodule)ofprivileged accounts into CyberArk acrossall theplatforms.
Minimum 3+ years of CyberArk experience and good knowledge on other PAM tools.
Strong communication skills are critical
Strong understanding of different CyberArk Components like CPM/PSM/PVWA/Vault etc.
Good Understanding of Rest API( Ifeel like this should be optional or “nice to have”)
Good knowledge in CPM Plugin and PSM Connector Development.
Proficient within many LDAP directory style platforms
Basic understanding of Windows Server Administration
Experience in Metrics tools likePowerBI, Tableauetc.(good to have)
Good knowledge in PowerShellscripting.(good to have)
Basic Unix administration knowledge
CyberArk certification or Security related certification.
Develop and Customize CPM plugins and PSM Connectors
Facilitate calls with the end users to explain the importance of management of Privileged accounts
Identify the automation opportunities and work on it.
Ability to create documents of high quality. Ability to work in structured environment and follow procedures, processes and policies
Identify area of improvement and propose enhancements to existing environments
Maintain a high level of procedural documentation with the international standards of Quality Management.
Excellent troubleshooting and problem-solving skills
Experience of Information Security, and a solid IT background.
Detailed knowledge of the Access Control and Privileged Access Management domains, including the Tools, Techniques and Procedures used.
Extensive knowledge in CyberArk PAM capabilities protecting Hybrid Environments (On-Prem, AWS, Azure)
Experience in creating detailed work breakdown structure for PAM implementation.
Ability to work with multiple stake holders from Security, Operations, Application Owners and Service Providers on deployment activities and enhancing the PAM solution.
Clear understanding of Operating systems, Database concepts and others potential targets or endpoints for a typical PAM Solution.
Experience in defining PAM processes and role definition with knowledge of native access control mechanisms.
Understanding of access control mechanism for Operating systems and Databases and other potential target devices.
An aptitude and interest for future innovations & technologies as well a willingness to continually learn and nurture those around you
PersonalRequirements:
You are a leader and an expert in delivery ofcyberframeworksand associated key solutions
A demonstrable passion for cybersecurity
Excellent communicationleadership/interpersonalskills;results driven and withstrong sense of accountability
You are experienced in engaging and persuading teams to accept and participate in best-in-class security architecture and operations
Data driven,abilityto analyze data needed to effectively measure progress against the execution of objectives
You successfully convey technical information in an understandable way that generates results
A troubleshooter who proactively removes roadblocks and pursues solutions toproblems that stand in the way
You value and develop trusted relationships at every operational level
The ability to operate with urgency andprioritisework accordingly
Strongdecision makingskills, the ability to demonstrate sound judgement
A structured and logical approach to work; Strongproblem solvingskills
A creative and innovative approach to work
Excellentpresentationskillsand excellent attention to detail and accuracy
The ability to manage large workloads and tight deadlines
A calm approach, with the ability to perform well in apressurisedenvironment
Responsible for identifying and onboarding (DNA scan/Account discoverymodule)ofprivileged accounts into CyberArk acrossall theplatforms.
Minimum 3+ years of CyberArk experience and good knowledge on other PAM tools.
Strong communication skills are critical
Strong understanding of different CyberArk Components like CPM/PSM/PVWA/Vault etc.
Good Understanding of Rest API( Ifeel like this should be optional or “nice to have”)
Good knowledge in CPM Plugin and PSM Connector Development.
Proficient within many LDAP directory style platforms
Basic understanding of Windows Server Administration
Experience in Metrics tools likePowerBI, Tableauetc.(good to have)
Good knowledge in PowerShellscripting.(good to have)
Basic Unix administration knowledge
CyberArk certification or Security related certification.
Develop and Customize CPM plugins and PSM Connectors
Facilitate calls with the end users to explain the importance of management of Privileged accounts
Identify the automation opportunities and work on it.
Ability to create documents of high quality. Ability to work in structured environment and follow procedures, processes and policies
Identify area of improvement and propose enhancements to existing environments
Maintain a high level of procedural documentation with the international standards of Quality Management.
Excellent troubleshooting and problem-solving skills
Experience of Information Security, and a solid IT background.
Detailed knowledge of the Access Control and Privileged Access Management domains, including the Tools, Techniques and Procedures used.
Extensive knowledge in CyberArk PAM capabilities protecting Hybrid Environments (On-Prem, AWS, Azure)
Experience in creating detailed work breakdown structure for PAM implementation.
Ability to work with multiple stake holders from Security, Operations, Application Owners and Service Providers on deployment activities and enhancing the PAM solution.
Clear understanding of Operating systems, Database concepts and others potential targets or endpoints for a typical PAM Solution.
Experience in defining PAM processes and role definition with knowledge of native access control mechanisms.
Understanding of access control mechanism for Operating systems and Databases and other potential target devices.
An aptitude and interest for future innovations & technologies as well a willingness to continually learn and nurture those around you
Work Experience:
Essential:
Experience in working onmultiple projects with broad scope, ambiguity, and high degree of difficulty
Experience in technology projects such as implementation of Cyber infrastructure replacement etc.
Demonstrable proficiency in a wide range of information IT security technologies and embedded security; at the minimum knowledge must cover key cybersecurity domains such as Identity and Access Management,IncidentManagementPosessinghigh level of analytical ability where problems are typically unusual and difficult
Ability to maintain a working knowledge of cybersecurity principles and elements
Understand global program structure, launch plan and timing, and global program ownership
Demonstrable experience of senior stakeholder management and relevant management reporting.
Ability to coach team members through knowledge transfer and constructive feedback
Mandatory skill sets:
Experience in working onmultiple projects with broad scope, ambiguity, and high degree of difficulty
Experience in technology projects such as implementation of Cyber infrastructure replacement etc.
Demonstrable proficiency in a wide range of information IT security technologies and embedded security; at the minimum knowledge must cover key cybersecurity domains such as Identity and Access Management,IncidentManagementPosessinghigh level of analytical ability where problems are typically unusual and difficult
Ability to maintain a working knowledge of cybersecurity principles and elements
Understand global program structure, launch plan and timing, and global program ownership
Demonstrable experience of senior stakeholder management and relevant management reporting.
Ability to coach team members through knowledge transfer and constructive feedback
Preferred skill sets:
Experience in Internal Audit/ Process Audit concepts & methodology
Processes, Sub-processes, and Activities as well as their relationship
Years of experience required:
2+ years
Education qualification:
Minimum 5 years’ experience in the above-mentioned skillset
Minimum 3+ years of CyberArk experience and good knowledge on other PAM tools.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required: MBA (Master of Business Administration), Chartered Accountant DiplomaDegrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Internal Audit
Optional Skills
Accepting Feedback, Accepting Feedback, Accounting and Financial Reporting Standards, Active Listening, Analytical Thinking, Artificial Intelligence (AI) Platform, Auditing, Auditing Methodologies, Business Process Improvement, Communication, Compliance Auditing, Corporate Governance, Creativity, Data Analysis and Interpretation, Data Ingestion, Data Modeling, Data Quality, Data Security, Data Transformation, Data Visualization, Embracing Change, Emotional Regulation, Empathy, Financial Accounting, Financial Audit {+ 24 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date
May 29, 2026
At PwC, we help clients drive their companies to the leading edge. We’re a tech-forward, people-empowered network with more than 370,000 people in 149 countries. Across audit and assurance, tax and legal, deals and consulting we help build, accelerate and sustain momentum. Find out more at www.pwc.com.
PwC: Audit and assurance, consulting and tax services
PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Content on this page has been prepared for general information only and is not intended to be relied upon as accounting, tax or professional advice. Please reach out to your advisors for specific advice.
