Incident Management Specialist

PwC Canada; Ottawa; On-site; CAD 120,000 - 160,000; Full time

Job summary

PwC Canada in Ottawa is seeking an experienced Incident Management Specialist (Level 3) to join our Cyber Security team supporting a complex enterprise environment with on‑premises and cloud technologies. You will help develop, implement and operationalize incident response capabilities and cybersecurity processes using Microsoft 365, Azure, and modern security platforms.

You will lead incident management activities, analyze threats, coordinate cross‑functional response efforts, review security

Qualifications

• Minimum 10 years of experience in Incident Management or related cybersecurity role.
• Valid Secret Security Clearance.
• One or more certifications from CISSP, CISM, CISA, CCSP, CRISC, SSCP, CompTIA Security+, CompTIA CySA+, GIAC, ISSEP, ISSM, PSABSA.

Responsibilities

• Lead and support cybersecurity incident management and incident response activities.
• Develop and enhance incident response processes, procedures, tools, and operational frameworks.
• Analyze security incidents, threats, vulnerabilities, and emerging risks.
• Review and assess system security logs and produce incident analysis reports.
• Coordinate prevention, detection, response, and recovery activities related to cybersecurity incidents.
• Support cyber security projects focused on cloud adoption, security modernization, and implementation of industry best practices.
• Collaborate with technical teams to design, assess, and implement security solutions.
• Evaluate security technologies, tools, and services and provide recommendations based on operational, technical, and business requirements.
• Assist with the development of security policies, standards, training materials, and operational procedures.
• Contribute to continuous improvement initiatives aligned with Zero Trust principles and modern cybersecurity frameworks.

Skills

Incident management

Threat analysis

Incident response

Security logs review

Stakeholder communication

Tools

Microsoft 365

Azure

Microsoft Sentinel

SharePoint Online

VPN and firewall basics

Job description

We are seeking an experienced Incident Management Specialist (Level 3) to join a growing Cyber Security team supporting a complex enterprise environment that includes both on-premises and cloud-based technologies. The successful candidate will contribute to the enhancement of the organization's overall security posture through the development, implementation, and operationalization of cybersecurity processes, frameworks, and incident response capabilities. The environment leverages Microsoft 365, Azure, enterprise networking technologies, and modern security platforms.

About the Role

The successful candidate will contribute to the enhancement of the organization's overall security posture through the development, implementation, and operationalization of cybersecurity processes, frameworks, and incident response capabilities, and will work within an environment that leverages Microsoft 365, Azure, enterprise networking technologies, and modern security platforms.

Responsibilities

• Lead and support cybersecurity incident management and incident response activities.
• Develop and enhance incident response processes, procedures, tools, and operational frameworks.
• Analyze security incidents, threats, vulnerabilities, and emerging risks.
• Review and assess system security logs and produce incident analysis reports.
• Coordinate prevention, detection, response, and recovery activities related to cybersecurity incidents.
• Support cyber security projects focused on cloud adoption, security modernization, and implementation of industry best practices.
• Collaborate with technical teams to design, assess, and implement security solutions.
• Evaluate security technologies, tools, and services and provide recommendations based on operational, technical, and business requirements.
• Assist with the development of security policies, standards, training materials, and operational procedures.
• Contribute to continuous improvement initiatives aligned with Zero Trust principles and modern cybersecurity frameworks.

Qualifications

• Minimum 10 years of experience as an Incident Management Specialist or in a related cybersecurity role.
• Valid Secret Security Clearance.
• One or more of the following certifications:
• CISSP
• CISM
• CISA
• CCSP
• CRISC
• SSCP
• CompTIA Security+
• CompTIA CySA+
• GIAC
• ISSEP
• ISSM
• PSABSA Foundation, Practitioner, or Master Certification

Required Skills

• Strong experience with security incident management, threat analysis, and incident response.
• Experience working within large enterprise environments leveraging Microsoft cloud and on-premises technologies.
• Proven ability to assess, plan, design, and implement security solutions.

Preferred Skills

• Experience with several of the following technologies is highly desirable:
• Microsoft 365
• Exchange Online
• SharePoint Online
• Microsoft Sentinel
• SQL Server
• Cisco networking technologies
• VPN and firewall technologies
• Enterprise security monitoring and logging solutions
• Strong understanding of cloud security and hybrid environments.
• Experience supporting Security Operations Centre (SOC) functions.
• Knowledge of cybersecurity frameworks, standards, and best practices.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work independently in a fast-paced, complex environment.