Business Information Security Officer (BISO) at PricewaterhouseCoopers (PwC)

Job Description & Summary

• At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies.
• They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
• Those in information security at PwC will focus on protecting sensitive data and systems from cyber threats through risk assessments, security audits, and implementing robust security measures.
• Your work will help enable the confidentiality, integrity, and availability of information assets for clients.
• PwC is driving major changes across information and cyber security by building a centralized model to provide security services across the entire network of member firms. 
• Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to the execution of the global Cyber Readiness Program, moving from local to globally provided services.
• Our mission is to identify, control, and reduce the attack surface across the network of member firms while increasing our adversaries’ cost of attack.
• NIS is redefining cyber security on a global scale at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide, as well as our global clients.

What does your work look like?

• This role is part of the Central and Eastern Europe (CEE) Chief Information Security Office (CISO) team. 
• CEE CISO team enables local and CEE regional security effectiveness and helps remove roadblocks and barriers from Cyber Readiness Program journey.
• The role focuses on supporting local implementation and delivery of NIS services, handling business compliance activities, assisting with security assessments, and working closely with regional and global teams on security matters.
• It involves hands-on operational security tasks, governance, risk management, and stakeholder engagement at the local and regional level.
• You will typically operate as a strategic liaison between the business and security teams, focusing more on translating business requirements into security initiatives and often operates at a more senior leadership level with broader accountability over business unit security posture.

Your skills and responsibilities include but are not limited to:

• Support local implementation and delivery of NIS services and BAU activities.
• Ensure compliance with Nigeria Data Protection Regulation (NDPR) in all data handling activities.
• Monitor and report on compliance with Securities and Exchange Commission (SEC) guidelines.
• Assist business teams with navigating Nigeria-specific security assessment and approval processes.
• Collaborate with global NIS service teams on matters impacting PwC Nigeria.
• Translate technical data into digestible formats for Nigerian business teams (e.g., dashboards, reports).
• Coordinate with Nigerian regulators and industry bodies on cybersecurity matters.

Qualifications and Experience

• Bachelor’s Degree in Computer Science, Information Security, or related field.
• Minimum of 3 years experience in cybersecurity or information security roles.
• Familiarity with NDPR, SEC regulations, and Nigeria’s IT governance frameworks.
• Relevant certifications (e.g., CISM, CISSP, NDPR compliance training) are preferred.

Regulatory Compliance:

• Adhere to NDPR requirements for data privacy and protection.
• Align role responsibilities with SEC compliance standards.
• Ensure local content development and licensing requirements are met.

 Who are you?:

• High level understanding of professional services industry business model, service offerings, and threat landscapes
• Aligning technical and the business world – ability to influence
• Interest in Information Security and a broad understanding of its ability to act as a differentiator in the market
• Solid understanding of technical information security risks in all of its facets
• Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.
• Creative problem solving and strong communication skills.
• Possess a growth mindset and be able to adapt to operate in different environments.