IT Application Security Manager

PricewaterhouseCoopers is the world's largest professional services organization with over 150,000 people in more than 150 countries. We are committed to attracting and retaining the very best human resource assets possible - one of our 'six forces' shaping the future of business.Industry: Not ApplicableDescription:
The US IT DS Security Liaison may supervise/manage staff, a function,
sub-function or area within a large office(s), region/cluster. Works on
problems requiring analysis. Applies comprehensive functional knowledge in
problem resolution. Actively contributes to the development of new methods,
procedures, processes or systems and understand the impact of these changes.
Leads functions and/or projects based on experience and knowledge. May be
responsible for decisions impacting a team and may provide input into the
decision making process for larger decisions. Proposes and defines solutions
and standards which may impact a team or the organization.Primary responsibilities for this position may include:Play a key role in creating an "awareness culture" with respect to IT Security
Champion both firm-wide and targeted IT Security awareness campaigns
Creation of US-specific IT security policies
Review external contracts with respect to PwC IT Security requirements.
Partner with the Firm's Office of the General Counsel and associated business
units to ensure verbiage and compliance
Coordinate policy and awareness campaigns.
Work with US IT's Business Management Group's Communications team, to ensure a
"common voice" with all external communications.The Security Liaison leads have three core functions:1) Ensure that IT security requirements are introduced and managed into the
SDLC process appropriately. The Security Liaison will be responsible for
translating global and US security policies into DS-specific requirements,
communicating these across their respective functional areas and ensuring their
inclusion in the DS release management methodology.
2) Manage ad-hoc, day-to-day IT security issues between US Security Services
and functional DS groups. Security issues will relate to previously developed
applications from respective functional areas. The Security Liaison will help
identify, track, and manage security issues through the application lifecycle.
3) Coordinate the remediation of identified security exposures within the
application layer of firm enterprise, LoS and KM applications.The Security Liaison will:Actively monitor their respective functional areas for issues and opportunities
to improve the Firm's risk profile. Stay current within their functional area,
especially as it relates to IT security. Provide security reviews of Project
Architecture Blueprint and Gate 2 releases. Actively drive the data
classification of all application data within their respective functional
area(s). Define and implement proactive testing of application development
efforts, ensuring that security assessments of internally developed code is
conducted at key points within the SDLC. Define and implement remediation
schedules/plans for noted security exposures. Provide guidance to development
team on secure coding best practices.Travel Requirements
0-20%
REQUIREMENTS
Education Requirement:
Education and Other Typical Requirements
Include typical job-related or other previous experience.
3-5 years IT experience required
3 years IT Security experience, preferred
Communications/PR background, preferred
Proven written communications skills
IT Audit/Compliance experience, preferredEssential Requirements:
Unique Aspects of the Position, Specialized Knowledge or Skills
CISSP certification required within first 12 months.
6 years working in security operations and information security.
Development experience with an emphasis on application authentication and
authorization models.
Solid understanding of J2EE and/or .Net security principles.
Knowledge of application security packages with Oracle, SAP and/or PeopleSoft
is desirable.
Good understanding of Lotus Notes from a database and mail perspective.
A good communicator with strong influencing and communication skills (written
and oral).
Organizational skills sufficient to manage multiple tasks and changing
priorities.
Ability to identify value-ad security services and target needs of the various
DS groups.
An effective leader who can influence without authority.