What Pricewaterhousecoopers Jobs are in the United Kingdom?

Line of Service

Assurance

Technology

Risk

Director

Cyber security is one of the defining topics of our age, and cyber risk represents one of the most significant strategic risks facing PwC's clients. In recent PwC research, cyber security continues to rank as the top risk in the minds of CEOs globally, with 91% of UK CEOs rating it as a significant concern. Organisations are operating in an environment of rapid digital transformation, disrupted supply chains and increasingly dynamic workforces.

PwC helps clients transform with confidence. Our Cyber Security practice enables organisations to execute change securely and to build long‑term cyber resilience. Operating nationally, we serve clients holistically, combining strategy, risk and governance advisory with deep technical delivery and assurance capabilities.

As one of the largest cyber security consulting practices in the UK, we have over 250 practitioners. Our team spans trusted business advisors working with boards and executive leadership, large‑scale transformation specialists delivering complex programmes, and deep technical subject matter experts who design, implement and operate critical security controls.

Driven by growing client demand and the increasing complexity of cyber risk, our practice is experiencing sustained growth. Helping our clients gain confidence in their digital future is a core priority for the firm, and cyber security remains a key strategic growth area for PwC.

PwC UK provides market‑leading Identity and Access Management (IAM) advisory, assurance and delivery services that deliver distinctive value and enable clients to optimise their digital business services securely.

Our approach brings together business insight, technical depth and industry experience to place digital identity at the centre of enterprise transformation. We support clients across the full IAM lifecycle, from strategy and operating model design through to technology implementation and optimisation.

We help organisations address a broad range of IAM challenges, including enabling digital and cloud transformation, governing and securing access, managing identity during mergers and divestments, improving workforce and customer experience, and evolving towards more risk‑based, automated and intelligence‑driven identity models.

To remain relevant and competitive in a rapidly changing world, PwC requires purpose‑led, values‑driven leaders at every level. Our global leadership framework, the PwC Professional, sets out the expectations, behaviours and capabilities required to succeed and progress across our firm.

As a Director in Identity and Access Management, you will lead teams of specialists to solve complex client challenges from strategy through to execution. You will play a pivotal role in shaping and delivering IAM strategies that enable secure, efficient and resilient access across complex enterprise environments.

You will lead large‑scale IAM programmes spanning workforce, customer and non‑human identities, including the design and deployment of technologies such as CyberArk for Privileged Access Management, Microsoft Entra and Active Directory, Okta for identity and authentication, and Saviynt for identity governance and administration.

• Leading the development and delivery of IAM strategies, operating models and transformation roadmaps across multiple sectors
• Providing senior leadership across complex IAM programmes, often comprising multiple workstreams and technologies
• Advising clients on IAM best practices, standards and regulatory requirements (e.g. GDPR, ISO 27001, NIST)
• Embedding Zero Trust principles and risk‑based access models into client IAM architectures
• Driving business growth through the expansion of IAM offerings and trusted client relationships
• Leading, mentoring and developing high‑performing IAM and cyber security teams
• Evaluating emerging IAM technologies and approaches, ensuring PwC remains at the forefront of the identity market
• Maintaining a strong understanding of evolving IAM standards, protocols and regulatory developments

• Extensive experience designing and delivering IAM solutions across large, complex and regulated environments
• Strong hands‑on and architectural experience with leading IAM platforms, including CyberArk, Microsoft identity technologies (Active Directory, Entra ID), Okta, Ping, Sailpoint, Saviynt etc.
• Demonstrable experience implementing IAM within Zero Trust architectures
• Deep understanding of identity capabilities, including access management, federation, identity governance, privileged access, certificate and key management, and non‑human identity security
• Strong knowledge of authentication and authorisation standards and protocols (e.g. OAuth 2.0, OpenID Connect, SAML, Kerberos)
• Experience aligning IAM capabilities with broader cyber security, cloud and enterprise architecture strategies
• Proven ability to communicate complex technical concepts clearly to senior executives and technical stakeholders, translating IAM outcomes into business value
• Experience delivering IAM solutions in line with recognised frameworks and standards such as NIST, ISO 27001 and CSA
• Experience advising on modern identity capabilities, including Identity Threat Detection and Response (ITDR), Identity Security Posture Management (ISPM) and shared IAM services frameworks.
• Extensive experience in cyber security roles, with a significant focus on Identity and Access Management
• Bachelor's degree in computer science, Information Systems or a related discipline, or equivalent professional experience

• Knowledge of Public Key Infrastructure (PKI), certificate lifecycle management and cryptographic services
• Awareness of emerging concepts such as crypto‑agility and quantum‑resilient identity and encryption approaches
• Experience operating IAM at scale within cloud‑first and hybrid environments
• Relevant professional certifications such as CISSP, CISM, CIAM, SABSA or equivalent

No matter where you may be in your career or personal life, our benefits are designed to add value and support, recognising and rewarding you fairly for your contributions.

We offer a range of benefits including empowered flexibility and a working week split between office, home and client site; private medical cover and 24/7 access to a qualified virtual GP; six volunteering days a year and much more.

Up to 20%

Yes

Yes

PricewaterhouseCoopers is looking for a Manager in their Incident and Threat Operations team to oversee technical analysis and cyber incident response. The ideal candidate will possess robust experience in incident response and build relationships with clients to drive initiatives effectively.

The role requires hands-on experience in digital forensics, a keen eye for detail, and the ability to mentor upcoming professionals in the field of cybersecurity. This is a critical position within a high-functioning team dedicated to responding to significant security incidents.

Line of Service: Assurance

Industry/Sector: Technology

Specialism: Risk

Management Level: Manager

Our Incident and Threat Operations services are central to this. We support PwC's clients in crisis across our global network to respond, remediate and recover from a wide variety of cyber attacks. We also support clients in developing detection engineering and threat hunting strategies for modern SecOps environments, and engineer automation and orchestration playbooks to streamline detection and response activities. We design playbooks for investigation, response, and recovery.

We are assured by the UK NCSC under its Enhanced Cyber Incident Response scheme, to respond to sophisticated attacks on networks of national significance. Recent incidents we have responded to include human-operated ransomware attacks on some of the world's largest corporations, and APT intrusions at NGOs. Our investigation work spans cyber crime, corporate espionage and state affiliated threat actors.

Our Incident and Threat Operations practice works closely alongside many other of our front-line technical teams to deliver an end to end incident response capability to clients, including our global threat intelligence team, our threat hunting team and our ethical hacking practice. We also work with PwC's dedicated crisis coordination team to provide support to clients at all levels of their organisations.

• Perform high quality technical analysis, helping our clients to understand what happened during a cyber security incident or data breach. Produce high quality output in a variety of formats, from daily update briefs to full technical investigation reports.
• Support technical activities such as behavioural detection content creation in support of SecOps modernisation and orchestration engagements.
• Work alongside client teams and ensure we manage risk appropriately throughout the project lifecycle, following PwC's processes for client and engagement acceptance.
• Manage client engagements: acting as the key point of contact for client technical teams, setting daily direction for PwC's technical teams, and being accountable for the technical excellence of our delivery.
• Provide mentoring and oversight to the incident response practice to help the team grow and develop.
• Collaborate and build relationships with PwC's wider Cyber Security practice, sharing insights gained from responding to incidents and helping other teams win and deliver work.
• Play a role in PwC's global incident response community to support knowledge sharing, practice development and to pursue opportunities in collaboration with global colleagues. Assist other PwC teams including crisis, external audit and eDiscovery with cyber subject matter expertise.

• A robust understanding of, and recent hands‑on experience with two or more of the following:
  • digital forensics and technical incident response;
  • enterprise security operations capabilities and tooling;
  • addressing detection coverage in EDR/SIEM solutions for ATT&CK TTP gaps;
  • enterprise IT networks and Active Directory; and,
  • cloud services such as Microsoft 365, Azure, GCP, and AWS.
• A keen eye for detail, and the ability to solve challenging technical problems. The capability to explain your technical findings to a variety of audiences, including non‑technical individuals. An understanding of threat actors and techniques used to compromise organisations.
• The ability to build relationships with colleagues, other members of PwC and our clients. Training and mentoring other team members in both technical and soft skills.
• Familiarity with, or experience delivering, incident readiness and preparedness services, such as tabletop exercises, threat briefings, incident playbooks or runbooks, and capability gap analysis.
• Acting as the investigation lead for small to medium sized cyber incidents, including overseeing the work of other team members. Scoping solutions for clients, for both preparatory and emergency work, and leading the response to client requirements.

• Accepting Feedback
• Active Listening
• Analytical Thinking
• Coaching and Feedback
• Communication
• Creativity
• Cybersecurity Framework
• Cybersecurity Governance
• Cybersecurity Risk Management
• Cybersecurity Strategy
• Cyber Security Threat Mitigation
• Cyber Threat Intelligence
• Digital Forensics
• Embracing Change
• Emotion Regulation
• Empathy
• Firewall (Network Security)
• Forensic Investigation
• Incident Management
• Incident Remediation
• Incident Response Plan
• Inclusion
• Intellectual Curiosity
• Learning Agility

Travel Requirements: Up to 20%

Available for Work Visa Sponsorship: Yes

Government Clearance Required: No