Business Information Security Officer (BISO) at PricewaterhouseCoopers (PwC)

What does your work look like?

• This role is part of the Central and Eastern Europe (CEE) Chief Information Security Office (CISO) team. CEE CISO team enables local and CEE regional security effectiveness and helps remove roadblocks and barriers from Cyber Readiness Program journey.
• The role focuses on supporting local implementation and delivery of NIS services, handling business compliance activities, assisting with security assessments, and working closely with regional and global teams on security matters. It involves hands-on operational security tasks, governance, risk management, and stakeholder engagement at the local and regional level.
• You will typically operate as a strategic liaison between the business and security teams, focusing more on translating business requirements into security initiatives and often operates at a more senior leadership level with broader accountability over business unit security posture.

Your skills and responsibilities include but are not limited to:

• Support local implementation and delivery of NIS services and BAU activities.
• Ensure compliance with Nigeria Data Protection Regulation (NDPR) in all data handling activities.
• Monitor and report on compliance with Securities and Exchange Commission (SEC) guidelines.
• Assist business teams with navigating Nigeria-specific security assessment and approval processes.
• Collaborate with global NIS service teams on matters impacting PwC Nigeria.
• Translate technical data into digestible formats for Nigerian business teams (e.g., dashboards, reports).
• Coordinate with Nigerian regulators and industry bodies on cybersecurity matters.

Regulatory Compliance

• Adhere to NDPR requirements for data privacy and protection.
• Align role responsibilities with SEC compliance standards.
• Ensure local content development and licensing requirements are met.

Who are you?

• High level understanding of professional services industry business model, service offerings, and threat landscapes
• Aligning technical and the business world – ability to influence
• Interest in Information Security and a broad understanding of its ability to act as a differentiator in the market
• Solid understanding of technical information security risks in all of its facets
• Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.
• Creative problem solving and strong communication skills.
• Possess a growth mindset and be able to adapt to operate in different environments.

Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Minimum of 3 years experience in cybersecurity or information security roles.
• Familiarity with NDPR, SEC regulations, and Nigeria’s IT governance frameworks.
• Relevant certifications (e.g., CISM, CISSP, NDPR compliance training) are preferred.