Security Operations Analyst

PwC South Africa; Utrecht; Hybrid; Confidential; Full time

Benefits offered by this job

Annual bonus

Training & leadership programs

Mobility app (OV) for travel

32 vacation days

Wellbeing budget

Job summary

PwC Netherlands is seeking a hands-on security operations professional to help run and improve the firm’s security posture. You'll work across vulnerability management, monitoring, and incident response with tools like Wiz and BitSight, collaborating with internal technology teams and the CISO office.

You will be empowered to own issues end-to-end, contribute to ongoing security hygiene, and explore AI-driven improvements in daily operations within a hybrid work model.

Qualifications

• 2+ years of hands-on experience in security operations, IT security, or equivalent IT function.
• Familiarity with vulnerability management, patching, logging and monitoring (SOC/NOC), and incident classification and response workflows.
• Solid understanding of core IT infrastructure, networking, and information security concepts (firewalls, identity management, encryption, access control).
• Basic scripting in Python or PowerShell is a strong plus; security certificates such as Security+, ISC2 CC, or equivalent.

Responsibilities

• Support the day-to-day operational security of PwC NL.
• Help track vulnerabilities through identification and reporting to remediation.
• Support and coordinate the vulnerability and patch management process, tracking findings and following up on remediation within agreed timelines.
• Contribute to incident management by supporting triage, investigation, escalation, documentation, and follow-up of security incidents and operational events.
• Monitor and review security logging and monitoring outputs, perform operational follow-up in platforms such as Wiz and BitSight, and route findings to the right owners through to closure.
• Manage and maintain the security exception management process, including registration, risk review, stakeholder follow-up, and periodic reassessment.
• Support overall security hygiene by following up on baseline control weaknesses, configuration issues, outdated assets, and access reviews.
• Communicate clearly with both technical and non-technical stakeholders; take ownership and stay curious about new tools and AI.

Skills

Vulnerability management

SOC/NOC experience

Logging & monitoring

Python/PowerShell basics

Security certifications

Education

Security+ or ISC2 CC (or equivalent)

Tools

Wiz

BitSight

Job description

Job Description & Summary

Do you want to play a hands‑on role in keeping PwC Netherlands secure every day? Are you energized by working across vulnerability management, monitoring, and incident response in one varied role? In this role you'll help run and improve PwC NL's security operations, from tracking vulnerabilities and reviewing monitoring outputs to managing security exceptions and following up on findings in tools like Wiz and BitSight. You'll work closely with internal technology teams and the CISO office, with direct visibility on the firm's security posture. It's a role where structured operational work and curiosity about new tools and AI go hand in hand.

Responsibilities

• Support the day-to-day operational security of PwC NL.
• Help track vulnerabilities through identification and reporting to remediation.
• Support and coordinate the vulnerability and patch management process, tracking findings and following up on remediation within agreed timelines.
• Contribute to incident management by supporting triage, investigation, escalation, documentation, and follow-up of security incidents and operational events.
• Monitor and review security logging and monitoring outputs, perform operational follow-up in platforms such as Wiz and BitSight, and route findings to the right owners through to closure.
• Manage and maintain the security exception management process, including registration, risk review, stakeholder follow-up, and periodic reassessment.
• Support overall security hygiene by following up on baseline control weaknesses, configuration issues, outdated assets, and access reviews.
• You work in a proactive way, take ownership of issues until they're resolved, and communicate clearly with both technical and non-technical stakeholders.
• You enjoy structured operational work and stay curious about new tools and how AI can improve day-to-day operations.

Qualifications

• 2+ years of hands‑on experience in security operations, IT security, or equivalent IT function.
• Familiarity with vulnerability management, patching, logging and monitoring (ideally in a SOC or NOC environment), and incident classification and response workflows.
• Solid understanding of core IT infrastructure, networking, and information security concepts (e.g., firewalls, identity management, encryption, access control).
• Basic scripting in Python or PowerShell is a strong plus, as are security certificates such as Security+, ISC2 CC, or equivalent.
• Strong problem‑solving mindset, able to break down complex problems and translate this to actionable insights for both technical and non‑technical stakeholders.

What we offer

• A competitive salary in line with your experience, an annual bonus (depending on results and personal development), and the opportunity to grow further in your career.
• A motivating work environment where collaboration with ambitious colleagues and recognition of your contributions are central.
• A wide range of tailor‑made training programs focused on professional growth and leadership development.
• Access to various mobility providers (OV) via one convenient app for your business and commuting travel.
• 32 vacation days and the option to purchase additional leave.
• At PwC, your well‑being is our priority. That's why we offer a personal well‑being budget to support your physical and mental health, as well as access to the well‑being platform OpenUp.
• You’ll work on challenging and meaningful projects, use leading technology including AI tools, learn from the best, and receive coaching support. Together we work as an inclusive team to make real impact.
• The flexibility of hybrid working, including a fully equipped home office and a monthly net expense allowance for internet and other costs.