Senior Associate – Vulnerability Management Operations

Cybersecurity Senior Associate

At PwC, our people in cybersecurity focus on protecting organizations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn't clear, you ask questions, and you use these moments as opportunities to grow.

Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:

• Respond effectively to the diverse perspectives, needs, and feelings of others.
• Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems.
• Use critical thinking to break down complex concepts.
• Understand the broader objectives of your project or role and how your work fits into the overall strategy.
• Develop a deeper understanding of the business context and how it is changing.
• Use reflection to develop self awareness, enhance strengths and address development areas.
• Interpret data to inform insights and recommendations.
• Uphold and reinforce professional and technical standards, the Firm's code of conduct, and independence requirements.

As a Senior Associate in Vulnerability Management Operations, you will join a team of problem solvers addressing complex business issues from strategy to execution. You will leverage your experience with vulnerability assessment tools and processes to analyze, prioritize, and remediate vulnerabilities for large-scale customers across various industries.

Required Experience:

• 4 to 6 years in Vulnerability Management operations, using assessment tools for large-scale clients.
• Experience analyzing and prioritizing vulnerabilities and recommending remediation.
• Experience configuring vulnerability assessment tools and integrating feedback to reduce false positives.
• Experience preparing vulnerability data and reports for technical and executive audiences.
• Experience guiding teams to address vulnerabilities (patching, controls, code/infrastructure changes).
• Experience tracking remediation actions and timelines with technology partners.
• Experience designing dashboards and scorecards.
• Experience reviewing and improving patch policies, procedures, and audit programs.
• Knowledge of security management, network protocols, data/application security solutions.
• Awareness of industry trends and emerging risks.
• Knowledge of legislation, regulatory requirements, and guidelines related to data protection, privacy, and security.
• Experience with end-to-end Vulnerability Management processes and tools (host-based scanners, patch management, GRC, ITSM).
• Knowledge of OS/application security, administration, and debugging.
• Knowledge of security controls (access, auditing, authentication, encryption, integrity, physical security, application security).
• Familiarity with Vulnerability Management tools: Qualys, Tenable, Nessus.

Responsibilities:

• Collaborate with a team to solve business challenges.
• Use feedback and reflection for personal development.
• Delegate tasks and coach others.
• Propose innovative solutions.
• Extract insights from business trends.
• Review work for quality and relevance.
• Communicate effectively with leadership.
• Build diverse, quality relationships.

Tools Knowledge:

• Tenable Nessus, Qualys, Crowdstrike

Understand the importance of have a correct information management

Knowledge of Information Security and Data Protection

Correct Information Security Management

All qualified applicants will receive consideration for employment at PwC without regard to ethnicity; creed; color; religion; national origin; age; disability; neurodiversity; sexual orientation; gender identity or expression; marital; or any other status protected by law. PwC is proud to be an inclusive organization and equal opportunity employer.