Technical Information Security Analyst

PwC Nederland; Amsterdam; Hybrid; EUR 80,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Annual bonus

Career development

Hybrid working

32 vacation days

Well-being budget

Job summary

PwC Nederland is seeking a Security Specialist to support Global Network Information Security services and ensure security controls align with PwC's Information Security Policy. You will act as a technical contact for incident investigations and post-incident reviews, coordinating end-to-end lifecycles and enabling timely resolutions.

You will engage in global and regional CISO pillar initiatives, perform access reviews, and drive security hygiene across applications, while contributing to risk

Qualifications

• Experience in IAM, vulnerability management, endpoint security, incident management and cloud security.
• Knowledge of regulatory frameworks and standards (NIS2, ISO 27001, NIST CSF, GDPR).
• Ability to communicate security risks to senior stakeholders clearly.

Responsibilities

• Support and contribute to the delivery of Global Network Information Security (NIS) services and ensure consistent implementation of security controls in PwC's Information Security Policy.
• Lead and coordinate end-to-end lifecycle of security incidents as technical contact for investigation, escalation, communication, and post-incident review.
• Engage in global and regional CISO pillar initiatives and maintain structured, data-driven review processes.
• Implement periodic access reviews and security hygiene activities across in-scope applications and platforms to uphold least-privilege principles.

Skills

Identity and access management

Vulnerability management

Endpoint security

Incident management

Cloud security

Job description

• Support and contribute to the delivery of Global Network Information Security (NIS) services and ensure consistent implementation of security controls in compliance with PwC’s global Information Security Policy.
• Lead and coordinate the end-to-end lifecycle of security incidents, acting as a technical point of contact for investigation, escalation, communication, and post-incident review, ensuring timely resolution and lessons-learned documentation in alignment with PwC's security frameworks.
• Proactively engage in global and regional CISO pillar initiatives.
• Implement periodic access reviews and security hygiene activities across in-scope applications and platforms, ensuring compliance with least-privilege principles, identity governance policies, and regulatory requirements through structured and data-driven review processes.
• Manage security exceptions processes, issue management, global risk assessments and evaluation, stakeholder engagement, and time-bound approvals, ensuring exceptions are tracked, reviewed, and remediated in a timely and governed manner.
• Active involvement and support in day-to-day security activities.

Key Responsibilities

• Support and contribute to the delivery of Global Network Information Security (NIS) services and ensure consistent implementation of security controls in compliance with PwC’s global Information Security Policy.
• Lead and coordinate the end-to-end lifecycle of security incidents, acting as a technical point of contact for investigation, escalation, communication, and post-incident review, ensuring timely resolution and lessons-learned documentation in alignment with PwC's security frameworks.
• Proactively engage in global and regional CISO pillar initiatives.
• Implement periodic access reviews and security hygiene activities across in-scope applications and platforms, ensuring compliance with least-privilege principles, identity governance policies, and regulatory requirements through structured and data-driven review processes.
• Manage security exceptions processes, issue management, global risk assessments and evaluation, stakeholder engagement, and time-bound approvals, ensuring exceptions are tracked, reviewed, and remediated in a timely and governed manner.
• Active involvement and support in day-to-day security activities.

Key Skills

• Min 3 years of experience & Solid knowledge of core information security domains including identity and access management (IAM), vulnerability management, endpoint security, incident management, and cloud security principles, with the ability to translate technical findings into business-relevant risk language.
• Working knowledge of relevant regulatory frameworks and standards such as NIS2 Directive, ISO 27001, NIST CSF, and GDPR, with the ability to apply these frameworks pragmatically within a large professional services environment.
• Demonstrated ability to work independently and confidently with senior business stakeholders, articulating security risks, requirements, and recommendations clearly and concisely.
• Strong analytical mindset with the ability to assess, prioritize, and communicate security risks objectively, supporting exception decisions and incident responses with structured, evidence-based reasoning.

What We Offer

With us, you’ll have the chance to be yourself, perform at your best in a high-performance organization, and grow within our global network. We offer you, among other things:

• A competitive salary based on your experience, an annual bonus and the opportunity to advance quickly;
• A motivating work environment where collaboration with ambitious colleagues and recognition for your contributions are central;
• A wide range of tailored training focused on professional growth and leadership development;
• Access to various mobility providers (OV) via one convenient app;
• 32 vacation days and the option to purchase additional days;
• At PwC, your well-being is our priority. That’s why we offer a personal well-being budget to help you grow in physical and mental health, as well as access to the well-being platform OpenUp;
• You’ll work on challenging and meaningful client projects, use cutting-edge technology such as AI tools, learn from the best, and receive support through coaching. Together, we work as an inclusive team to make a real impact;
• Flexibility through hybrid working, including a fully equipped home office and a monthly net expense allowance for internet and other costs.

Curious about what else we have to offer? Discover all employment conditions and extras on our website.