Aurelia Butler

Employment:

Full Time

Line of ServiceInternal Firm ServicesSpecialismIFS – Risk & Quality (R&Q)Management LevelAssociateJob Description & SummaryPwC is driving major change across information and cyber security by building a centralized model to provide security services across the entire member firm network.Mandated at the network level, Network Information Security (NIS) operates outside Information Technology (IT) and is responsible for this major program initiative, from definition of the security strategy to the execution of the global Cyber Readiness Program, moving from local to globally-provided services.Our mission is to identify, control, and reduce the attack surface across the member firm network while increasing our adversaries’ cost of attack.In order to deliver the Cyber Readiness Program, the NIS team is structured into the following Pillars:- Information Security Risk and Compliance (ISRC)- Chief Information Security Office (CISO)- Security Architecture, Engineering, Innovation and Transformation (SAEIT)- Cyber Security Services- Strategy and Alliances- Chief of StaffNIS is building the first global cyber security function at PwC. Our mission protects 223,000 PwC members across 157 member firms worldwide, as well as our global clients.If you are seeking an exciting career with the scope to grow your cyber security skills through major change on a global scale, then NIS will empower you to do so.The CISO pillar within NIS is responsible for the following services:- Engagement- Governance- Measurement- Service InterfaceIf you love the business side of information security this is the place to be. Within CISO pillar we work closely with member firm stakeholders to understand their business model and roadmap for technology. In turn CISO pillar outline the roadmap for NIS and drive engagement and adoption of central security services in line with the PwC Cyber Readiness program. Management of relationships between NIS and the business is key to delivering the cyber readiness mission. Whether it be integrating solutions, driving operational processes or providing guidance back to NIS to further enhance our strategy, CISO pillar provide the engagement and personal touch to enable NIS to deliver maximum value to the customer, the PwC Network of firms.The CISO Services Team is made up of 4 core areas:- CISO Engagement- NIS Service Interface- CISO Measurement- CISO GovernanceEach of these areas work together to successfully support member firm Information Security Officers (ISOs) and their staffs in the implementation of the PwC Information Security Policy (ISP).Core skills within the CISO Services Team consist of:- Conduct analysis of member firm needs in order to make appropriate decisions for the implementation of NIS global security strategy;- Engage with member firm stakeholders to assess security threats/vulnerabilities and manage business risk;- Facilitate member firm support from Security Architecture, Engineering, Innovation, and Transformation (SAEIT) and Cyber Security Service Management throughout the NIS service lifecycle;- Assess service availability, adoption rates, and maturity to manage risk to business programs and processes;- Govern member firms for compliance with PwC’s Information Security Policy (ISP) and legal/regulatory frameworks; and- Engage with Global IT and Applications to review security controls against ISP.Strategic and Technical Orientation / Job Content:Individuals selected for this role are expected to have both extensive knowledge and managerial know-how related to the following aspects of the CISO pillar skills matrix:- Experience managing multi-function relationships throughout major transformation;- Understanding of security technology;- Experience in a role balanced between business stakeholders and a central service organization;- Navigating a multifaceted, matrix organization; and- Collaborating with multiple stakeholders across functional and technical skillsets.

Range of Impact:- A 1E employee possesses knowledge in a specific subject matter area or technical domain related to the CISO Services function. 1E staff evaluate circumstances and, when appropriate, independently make recommendations to determine the best courses of action to execute strategy, and influence others through interactions with co-workers within the CISO Services team.- Demonstrates some abilities in managing efforts within business engagement and relationship management space.- Contribute positively to a working environment by building solid relationships with team members.- Build and maintain relationships across the network of firms to effectively deliver security activities on behalf of NIS- Executes tasks aligned to CISO pillar with autonomy.Job Objectives and Key Metrics:Responsibilities: – Manage relationships across PwC member firms- Map existing member firm services to NIS service catalogue- Define roadmap for integration of member firm services into NIS shared services- Provide consultancy throughout service integrationMetrics: – Capture metrics aligned to service integration and service adoption- Drive quality of service to our stakeholdersEducation Level:- Required: High school diploma or G.E.D.- Preferred: Undergraduate Degree (e.g., BA, BS) in Information technology or field of study applicable to the role and/or completed certifications involving cybersecurityExperience Level:- 1 – 3 Years’ of progressive professional roles involving information security, IT management and/or major program management.Other Details:An effective CISO pillar candidate will also possess the following skills:- Analytical: Inquisitive nature and intuition regarding what questions to ask, when, and their relative significance.- Technical: Broad understanding of security technology.- Business: High level understanding of PwC’s business model, service offerings, and business operating environment as it pertains to the firm’s threat landscape. Ability to frame threats and exposures in a business context recognized bynon-technical staff and executives.- Domain landscape: Knowledge of assurance and technical security principles- Communication: Ability to leverage business communication skills to inform, persuade, and teach stakeholders across a global network of member firms’ staff and leadership to enable effective information security activities and processesin line with the cyber readiness program

At PwC Middle East, we’ve set out an ambitious purpose and strive to live it everyday: to solve important problems and build trust in society.

We’re a community of solvers that come together in unexpected ways to build trust and create sustained outcomes. We solve important problems, support one another as we grow, develop and build fulfilling careers.

PwC provides industry-focused services for public and private clients across Assurance and Audit, Deals, Consulting, Tax and Legal. We draw on our development legacy that brings together the collective experience of over 7,000 people in our region with offices across 12 countries to solve for tomorrow.

We’re striving to consistently deliver innovative work that builds trust and delivers sustained outcomes. And we’re proud of the strength that comes from all our different backgrounds and experiences and we value everyone’s uniqueness. We thrive in uncertainty, operate with integrity and leverage the diverse perspectives of our teams.

If you’re looking for a place that fuels your ambition to make a difference, that matches your curiosity with continuous learning opportunities and reimagines ways of working to enable you to lead a more balanced life, then you’re a future PwCer. More

Employment:

Full Time

The role holder is responsible for owning the risk around the tuning of the Fircosoft screening solution and ensuring it aligns with the Banks risk appetite. The role holder should support the Senior Manager, Compliance Systems by tuning and documenting the screening systems (both name and transactions) and ensuring they are aligned to the Risk appetite of the Bank. They will ensure all rules put into the system are reviewed and approved by the appropriate stakeholders.Primary responsibilities are as follows• Design and develop a framework to document, manage and track the testing and validation of the filtering within the Bank focusing primarily on the two areas of:• Effectiveness – Is the filter capturing all the appropriate alerts in line with the Banks risk appetite• Efficiency – Is the filter optimized to automatically suppress as many false positive alerts as possible without introducing any risk of discarding genuine alerts. • Design and develop framework to document, manage and track the testing and validation of the following Fircosoft Modules and their parameters: Decision Re-application, Stripping, Workflow Accelerator and Pairing• Test and document the impact of each of the 46 matching algorithms within the 8 different filters over each of the following systems: Payment screening both International and Domestic • Customer Onboarding which includes Sanctions, PEP and Adverse Media• Customer Periodic Screening which includes Sanctions, PEP and Adverse Media• Perform yearly analysis of the filter configuration to ensure appropriateness and alignment to the Banks risk appetite• Perform yearly filter effectiveness testing as per CBUAE guidelines• Review all created rules and ensure they have appropriate controls around them to ensure they do not expose the Bank to any risk• Create reports and documentation around the configuration, rules and good guys and ensure they correctly reflect the technical rules that have been implemented• Weekly walk through and presentation of the recommended rules to CCO, Head of FCC and Sanctions Manager to get their buy in and approval of each rule and parameter change• Ensure the optimization of rules to support maximum system performance• Perform regular QA over the work of their team• Verification of tuning results and configuration

Requirements• Must have a strong background in Financial Crime• Must have a background in Fircosoft tuning• Well versed with banking systems, concepts and banking best practices• At least 5+ years of experience in the banking/financial services sector within a Compliance related role.• Stakeholder Communication and management• Team leadership• Good written and oral communication.• Problem identification and solving skills.• Report writing skills

In 1969, when we at Commercial Bank of Dubai started out little did we know that sheer grit and determination would get us where we are today. An Emiri Decree issued by His Highness the Late Sheikh Rashid Bin Saeed Al Maktoum, the founder of modern Dubai, laid the cornerstone of Commercial Bank of Dubai. We started out as a joint venture of Commerzbank, Chase Manhattan Bank and Commercial Bank of Kuwait. A minority stake was held by a few UAE businessmen.

By 1982, little more than a decade later, we evolved into a National Public Shareholding company. A feat complimented by an exponential increase in the capital base and mammoth restructuring of our operations. The feather in the cap came when the Government of Dubai became a key shareholder.

Over the decades, we have transformed ourselves into a progressive and modern banking institution. We are supported by a sturdy financial base and reigned by a strong and stable management. The proof of which lies with our customers who have stood by us over the years. More