INSenior AssociateApplication Security RiskDigital IntegrationAdvisoryKolkata
Job Summary
Line of Service
AdvisoryIndustry/Sector
Not ApplicableSpecialism
MicrosoftManagement Level
Senior AssociateJob Description & Summary
At PwC our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities develop secure systems and provide proactive solutions to safeguard sensitive data.As a cybersecurity generalist at PwC you will focus on providing comprehensive security solutions and experience across various domains maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
Why PWC
At PwC you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes forour clients and communities. This purpose-led and values-driven work powered by technology in an environment that drives innovation will enable you to make a tangible impact in the real world. We reward your contributions support your wellbeing and offer inclusive benefits flexibility programmes and mentorship that will help you thrive in work and life. Together we grow learn care collaborate and create a future of infinite experiences foreach other. Learn more about us.
At PwC we believe in providing equal employment opportunities without any discrimination on the grounds of gender ethnic background age disability marital status sexual orientation pregnancy gender identity or expression religion or other beliefs perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firms growth. To enable this we have zero tolerance for any discrimination and harassment based on the above considerations.
Responsibilities:
Work with Risk Reviewers to ensure tickets are being processed accurately and efficiently
Work with Consultation Services Architects toidentifygaps in compliance anddetermineinherent risk mitigating factors and residual risk
Collaborate with other AppSecsubpillarteams to ensure relevant processes are completed as necessary and in good standing to support AR disposition
Interface with customers to provide guidance relevant to AppSec requirements
Escalate risks and other concerns to Application Readiness Regional Leads BISOs CISOs and other relevant stakeholders
Interface witha number ofother NIS service providers such as Policy TPRM Issues Management Threat Management
Provide dispositionon ticketsand publish other deliverables as applicable
Skills Needed:
Strong communication skills
Strong English written and verbal skills
Customer service skills to createaexceptional customer experience
Strong organizational and time management skills to support multiple concurrent reviews
People leadership skills to provide oversight of Risk Reviewers coaching and mentoring in an informal fashion
Self- Awareness
Ability and confidence to exercise professional skepticism with soft skills to do so with diplomacy
Knowledge of the Information Security Policy Application Readiness Standard and applicable supporting Standards
Ability to assess whether a control is met or not met (black and white)
Ability to navigate the grey when a control does not meet the letter of the control
Ability to review documentationanalytically andassess control compliance based on information/ documentation provided.
Ability to evaluate complex data anddeterminewhether data can be used to support the reviews being conducted
Ability to pull facts and details related to controls fromdifferent typesof documentation and diagrams submitted
An understanding of when and how to escalate
Skill and Experience:
Good understandingof ApplicationIT Security Standardson-premiseas well ascloud-based.
Good understanding of risk management and experience withidentifyingand assessing potential information security risks.
Good understanding and exposure to technical risk assessment along with vulnerability assessment and penetration testing.
Strong communication skills and the ability toproviderisk guidance inform management about potential risk issues and relay information about policy requirements effectively
Proper Experience in coordination of issue tracking Follow-Ups communication skills in a global environment.
Desired Certifications: (not mandatory)
CISSP / CISM /CISA / CCSK / CCSP / CRISC
Mandatory skill sets:
ApplicationSecurity Risk Manager
Preferred skill sets:
ApplicationSecurity Risk Manager
Years of experience required:
4 to 8 years
Education qualification:
(if blank degree and/or field of study not specified)
Degrees/Field of Study required: Bachelor of Technology Bachelor of EngineeringDegrees/Field of Study preferred:Certifications (if blank certifications not specified)
Required Skills
Information Security Risk ManagementOptional Skills
Accepting Feedback Accepting Feedback Active Listening Analytical Reasoning Analytical Thinking Application Software Business Data Analytics Business Management Business Technology Business Transformation Communication Creativity Documentation Development Embracing Change Emotional Regulation Empathy Implementation Research Implementation Support Implementing Technology Inclusion Intellectual Curiosity Learning Agility Optimism Performance Assessment Performance Management Software 16 moreDesired Languages (If blank desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship
Government Clearance Required
Job Posting End Date
April 15 2026Required Experience:
Senior IC
Key Skills
About Company
At PwC, our purpose is to build trust in society and solve important problems. We’re a network of firms in 155 countries with over 284,000 people who are committed to delivering quality in assurance, advisory and tax services. Find out more and tell us what matters to you by vis ... View more