|
Job Description & Summary:
PwC's Cyber and Digital Trust team supports major digital
transformation programs and is seeking a Security Engineer specialising in
integration technologies. You will add capacity to our existing security
team, working alongside security architects to support triage, risk
assessment, security design and development activities across the integration
layer for major digital transformation program delivery.
The role will help delivery teams identify and address
security risks early, translate security requirements into practical
implementation guidance, and provide evidence that agreed controls have been
implemented effectively.
The Integration Security Engineer will support the secure
design and delivery of integrations, APIs and associated platform services
within major technology transformation programmes.
The role will work closely with integration architects,
MuleSoft specialists, developers, platform engineers and the programme’s
Security Architects. It will provide hands-on security input into integration
patterns, API design, authentication, data flows, secrets management and the
implementation of appropriate security controls.
Beyond securing integration-specific components, a key
part of this role is enabling the developers who build and manage
integrations to do so securely — embedding security by design and secure
development practices throughout.
Role Summary:
We are seeking experienced Technology Risk and Operational
Resilience professionals to support global Financial Services clients in
strengthening their resilience, technology risk, and regulatory compliance
capabilities.
The role involves working with business, technology, information security,
risk, compliance, and operations teams to design, implement, assess, and
enhance operational resilience and technology risk frameworks. Candidates
should have experience supporting regulatory compliance initiatives,
operational resilience programs, IT/ICT risk management, governance
activities, risk assessments, and remediation programs within banking,
capital markets, insurance, asset management, or consulting environments.
|
|
Responsibilities:
|
Project Execution:
Operational Resilience
Support development and implementation of operational resilience frameworks.
Identify and assess Important Business Services (IBS).
Conduct impact tolerance assessments and service mapping activities.
Support resilience testing, scenario analysis, and tabletop exercises.
Assist with incident response, crisis management, and recovery planning
activities.
Track remediation and resilience improvement initiatives.
Technology & ICT Risk Management
Perform technology, cyber, and ICT risk assessments.
Assess control design and operating effectiveness.
Support risk identification, control testing, issue management, and
remediation tracking.
Maintain risk registers, Key Risk Indicators (KRIs), and risk reporting
dashboards.
Support governance activities related to technology and operational risk.
Regulatory Compliance & Risk Governance
Support implementation of regulatory requirements related to operational
resilience and technology risk.
Translate regulatory expectations into policies, controls, procedures, and
governance processes.
Prepare evidence and documentation for audits, reviews, and regulatory
examinations.
Coordinate closure of audit findings and regulatory actions.
Monitor evolving regulations relating to operational resilience, cyber
resilience, and technology risk.
Third-Party & Vendor Risk
Perform third-party risk and vendor assessments.
Support ICT and outsourcing risk reviews.
Assess concentration risk and critical supplier dependencies.
Evaluate resilience and risk controls within vendor ecosystems.
Stakeholder Management & Reporting
Prepare governance committee materials, dashboards, and management reporting.
Engage with technology, security, operations, compliance, and business
stakeholders.
Facilitate workshops, risk assessments, and resilience
Process & Performance Management:
- Contribute
to the development and documentation of business processes and standard
operating procedures (SOPs)
- Monitor
service level agreements (SLAs) and assist in preparing performance
reports
- Identify
opportunities for operational efficiency and recommend actionable
improvements
|