Hybrid InfoSec Analyst: Incident Response & IAM

PwC Nederland; Amsterdam; Hybrid; EUR 80,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Annual bonus

Career development

Hybrid working

32 vacation days

Well-being budget

Job summary

PwC Nederland is seeking a Security Specialist to support Global Network Information Security services and ensure security controls align with PwC's Information Security Policy. You will act as a technical contact for incident investigations and post-incident reviews, coordinating end-to-end lifecycles and enabling timely resolutions.

You will engage in global and regional CISO pillar initiatives, perform access reviews, and drive security hygiene across applications, while contributing to risk

Qualifications

• Experience in IAM, vulnerability management, endpoint security, incident management and cloud security.
• Knowledge of regulatory frameworks and standards (NIS2, ISO 27001, NIST CSF, GDPR).
• Ability to communicate security risks to senior stakeholders clearly.

Responsibilities

• Support and contribute to the delivery of Global Network Information Security (NIS) services and ensure consistent implementation of security controls in PwC's Information Security Policy.
• Lead and coordinate end-to-end lifecycle of security incidents as technical contact for investigation, escalation, communication, and post-incident review.
• Engage in global and regional CISO pillar initiatives and maintain structured, data-driven review processes.
• Implement periodic access reviews and security hygiene activities across in-scope applications and platforms to uphold least-privilege principles.

Skills

Identity and access management

Vulnerability management

Endpoint security

Incident management

Cloud security

Job description

PwC Nederland is seeking a Security Specialist to support Global Network Information Security services and ensure security controls align with PwC's Information Security Policy. You will act as a technical contact for incident investigations and post-incident reviews, coordinating end-to-end lifecycles and enabling timely resolutions.

You will engage in global and regional CISO pillar initiatives, perform access reviews, and drive security hygiene across applications, while contributing to risk