Job Description & Summary

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In cybersecurity incident management at PwC you will focus on effectively responding to and mitigating cyber threats, maintaining the security of client systems and data. You will be responsible for identifying, analysing, and resolving security incidents to minimise potential damage and protect against future attacks.

Meaningful work you’ll be part of

As a Cybersecurity Incident Management Manager, you will serve as the technical lead and escalation point for complex and high‑severity security incidents. You’ll guide and mentor Level 2 analysts, ensure operational excellence, and collaborate closely with stakeholders to drive strategic incident response initiatives.

- Serve as the escalation contact for confirmed and high‑impact incidents.
- Oversee technical investigations and coordinate response activities across multiple teams.
- Take technical ownership of the Level 2 senior security analysts’ team, ensuring advanced analysis and investigation of security incidents identified by Level 1 analysts or security tools.
- Provide guidance and assistance to Level 2 senior security analysts with troubleshooting, escalation, and resolution of complex or critical security issues.
- Coordinate incident response and recovery actions with Level 2 analysts and other teams,



ensuring appropriate countermeasures and remediation steps are implemented.
- Review and validate security incident reports and recommendations from Level 2 analysts to confirm quality and accuracy standards are met.
- Conduct quality assurance reviews of incident reports and provide feedback and suggestions for improvement to Level 2 analysts through regular interactions with the QA lead/team.
- Collaborate with Level 2 analysts and other teams regarding complex or high‑severity incidents requiring further investigation or intervention.
- Conduct performance evaluations and feedback sessions for Level 2 senior security analysts and identify areas for training and development.
- Develop and deliver training and mentoring programs for Level 2 analysts to support relevant skills acquisition and certification maintenance.
- Work with clients and stakeholders to offer strategic and technical guidance on security incidents and services, promoting customer satisfaction and retention.
- Monitor and report on key performance indicators and metrics for the Level 2 senior security analyst team, confirming service level agreements and objectives are achieved.
- Maintain regular communication with shift leads to review daily security operations metrics, KPIs, and SLAs,



addressing any identified gaps.

Required Qualifications

- Bachelor's degree in a relevant area of study, preferably Computer Science or Computer Engineering.
- Minimum of 6 years in Information Technology and minimum of 4 years in Information Security.
- Proficient in Incident Response and Management.
- Knowledge of security tools such as SIEM, EDR, and operating system flavours including Windows, Linux, and Unix.
- In‑depth knowledge of security concepts such as cyber‑attacks, threat vectors, risk management, incident management, and related technologies.
- Experience with applications, databases, and middleware to address security threats; able to prepare reports, dashboards, and documentation.
- Excellent communication and leadership skills with experience in vendor management.
- Ability to handle high‑pressure situations with key stakeholders and strong analytical, problem‑solving, and interpersonal skills.
- Industry certifications such as CISSP, GIAC, or EC‑Council are an asset. Experience in an MSSP setting is preferred.

Other Requirements

- Security clearance mandatory; candidates must meet eligibility requirements.
- Hybrid work model; expect discussion of expectations during the interview.

Compensation

Salary range: $112,400 – 162,400. Base salary is determined by skills, experience, qualifications, and work location. Eligible employees may participate in variable incentive pay programmes designed to reward individual and firm‑wide achievements.

#J-18808-Ljbffr

📌 Cybersecurity Incident Manager (Toronto)
🏢 PwC Canada
📍 Toronto