In - senior Associate_ Security Operations - Cyber Hygiene, Vulnerability Management, Power BI _IN IT Services Co_ifs_pan India

Security Operations Analyst

At PwC, our people in infrastructure focus on designing and implementing robust, secure IT systems that support business operations. They enable the smooth functioning of networks, servers, and data centres to optimise performance and minimise downtime. In infrastructure engineering at PwC, you will focus on designing and implementing robust and scalable technology infrastructure solutions for clients. Your work will involve network architecture, server management, and cloud computing experience.

We are looking for a detail-oriented Security Operations Analyst to support our cybersecurity team by managing cyber hygiene practices, conducting vulnerability assessments, and developing Power BI dashboards to visualize security metrics and trends. The successful candidate will help strengthen our organization's security posture by ensuring timely identification and remediation of vulnerabilities while providing actionable insights through effective reporting.

Responsibilities:

• Monitor and enforce cyber hygiene best practices across endpoints, networks, and applications to reduce risks and improve security maturity.
• Conduct regular scanning, identification, and assessment of vulnerabilities using industry tools such as Qualys, Nessus, Tenable, or similar.
• Coordinate with IT, development, and business teams to remediate vulnerabilities based on priority and risk level.
• Analyze security alerts and incidents related to vulnerabilities and other hygiene factors, escalating as necessary.
• Develop, maintain, and enhance Power BI dashboards/reports that provide real-time visibility into vulnerability trends, remediation status, compliance, and overall cyber hygiene metrics.
• Collaborate with Security, Risk, and Compliance teams to support audits and demonstrate adherence to policies and regulatory requirements.
• Track Key Performance Indicators (KPIs) such as patching compliance, vulnerability aging, closure rates, and control effectiveness.
• Support development of standard operating procedures (SOPs), runbooks, and documentation related to vulnerability management lifecycle and cyber hygiene practices.
• Stay current with threat landscape, vulnerability disclosures, and emerging security tools/technologies to continuously improve security operations.

Mandatory skill sets:

• Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Tenable.io) and remediation tracking processes.
• Proficiency in Microsoft Power BI or similar BI tools for dashboard development and data visualization.
• Strong understanding of cyber hygiene concepts, patch management, endpoint security, and network security fundamentals.
• Familiarity with vulnerability management frameworks, CVSS scoring, and risk prioritization.
• Knowledge of security standards and compliance frameworks such as ISO 27001, NIST, CIS Controls, or PCI-DSS.
• Basic scripting or query skills (e.g., PowerShell, SQL) to extract and manipulate security data are preferred.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work collaboratively in a team environment and independently manage assigned tasks.

Preferred skill sets:

• Security certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), GIAC Cyber Defense (GCD) certifications, or equivalent.
• Experience integrating vulnerability data with SIEM and ticketing systems (e.g., Splunk, ServiceNow).
• Curiosity: A natural curiosity and eagerness to learn, explore new ideas, and see past the status quo.
• Collaboration: A natural collaborator, suited to work in a collaborative culture with a diverse and talented team that values collaboration, constructive challenging and mutual respect.
• Challenge: Demonstrates the capability to question and challenge ideas, decisions, and processes in a constructive manner, fostering a culture of continuous improvement and innovation while maintaining respect and professionalism in all interactions.
• Value Driven: Demonstrates a strong commitment to ethical principles and organisational values, ensuring that all actions and decisions align with the company's mission and integrity standards.
• Excellent attention to detail.
• Proactive.
• Adaptability in dynamic environment
• Azure Certified Solution Architect

Years of experience required: 4+ yrs

Education qualification: Bachelor's degree