Secure Software/AppSec Manager - Consulting Services at PwC · Brussels

Secure Software/AppSec Manager - Consulting Services Location: Brussels Line of Service Assurance Industry/Sector Not Applicable Specialism Assurance Management Level Manager Job Description & Summary Contribute to creating a better tomorrow The only way we can tackle the challenges of this fast-changing world is with passionate people. Led by our purpose of building trust and solving important problems, we come together at PwC to address the biggest issues facing the world in a way that drives positive impact. Are you eager to join a team fuelled by open and curious minds? People who are passionate about their work and create new solutions for a new day? Then you’re at the right place. Bring your talent. Learn new skills. Make a positive impact. We are seeking a highly skilled and structured Secure Software Manager to oversee consulting assignments related to the end-to-end delivery of application security projects. This role involves guiding clients through the implementation of security measures in their software applications, including overseeing comprehensive code reviews, vulnerability assessments, threat modeling, Agile, and DevSecOps integration, as well as Software Development Life Cycle (SDLC) process reviews. The ideal candidate will have a strong background in software development, extensive knowledge of programming languages and frameworks, and a deep understanding of application security methodologies. Familiarity with the OWASP Software Assurance Maturity Model (SAMM) is required. CSSLP certification and active involvement in the open-source landscape are considered advantageous. Your impact Client Engagement and Consulting: - Serve as the primary point of contact for clients, managing consulting assignments focused on application security. - Develop security strategies tailored to client needs and ensure successful implementation of security initiatives. Application Security Leadership: - Lead and manage security projects for clients, ensuring delivery of secure and robust applications. - Provide expert guidance and recommendations to improve client application security posture. Oversight of Security Processes: - Oversee and ensure quality delivery of code reviews, vulnerability assessments, and threat modeling conducted by the team. - Maintain responsibility for the accuracy, thoroughness, and quality of deliverables. Agile and DevSecOps Integration: - Guide clients in integrating security practices within Agile and DevOps workflows for secure software delivery. - Implement automation tools and practices to enhance security throughout the client development lifecycle. SDLC Process Review: - Evaluate and refine client SDLC processes to incorporate security best practices. - Collaborate with client teams to ensure seamless integration of security initiatives. Training and Development: - Provide training to client development teams on secure coding practices and security tools. - Stay informed about industry trends and advancements in application security. About You Bachelor's degree in Computer Science, Information Security, or related field; Master's degree preferred. Proficiency in Dutch and English is a must 6-7 years of proven experience in software development or AppSec consulting with in-depth knowledge of common programming languages such as Java, .Net, JavaScript, PHP, and C. Demonstrated experience in application security, including overseeing code reviews, vulnerability assessments, and threat modelling. Familiarity with OWASP SAMM (and similar models) is mandatory. CSSLP certification is a plus. Strong understanding of Agile and DevSecOps principles and practices. Familiarity with Linux, Kubernetes and cloud-native architectures is a plus. Development experience with modern front-end frameworks is a plus. Active involvement in the open-source landscape is a plus. Experience in managing client relationships and consulting engagements. Excellent problem-solving skills, attention to detail, and a structured approach to managing projects. Strong communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders. Life at PwC Belgium Our culture and workplace are something we’re proud of. Here’s a sneak peek at what life at PwC looks like: • Flexible work patterns: Achieve the perfect balance between office and home life with our flexible hybrid work arrangements and family-friendly schemes. • Lifelong learning: Grow with us! Take advantage of our diverse training opportunities and exciting career pathways to explore new disciplines and expertise. • Flexible rewards: Tailor your benefits to suit your lifestyle with our customizable rewards plan. • Sustainable mobility: Choose eco-friendly mobility options, from our soon-tobe fully electrified fleet to public transport, shared cars, ebikes, and more. • Inclusive culture: Thrive in a diverse, inclusive workplace that values and celebrates every individual's contributions. • Wellbeing focus: Enjoy a positive environment with our comprehensive wellbeing programs, engaging sports communities, and confidential support for all your professional and personal challenges. • Global network: Expand your horizons with opportunities to work abroad and tap into extensive industry expertise within the PwC network. Let’s build something great together. What are you waiting for? Equal Opportunity Employer statement At PwC, we are dedicated to building a diverse, inclusive, and authentic environment. We are committed to providing equal employment opportunities for all candidates and employees, regardless of race, religion, gender identity or expression, sexual orientation, national origin, age, disability, marital status, or any other characteristic protected by law. We believe that a diverse and inclusive workplace drives innovation and strengthens our ability to serve our people, clients and communities. Join us in fostering a culture where everyone feels valued, respected and empowered to achieve their full potential. Additionally, we provide reasonable accommodations to qualified individuals with disabilities, in accordance with applicable laws. Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Degrees/Field of Study preferred: Certifications (if blank, certifications not specified) Required Skills Optional Skills Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Coaching and Feedback, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Professional Courage {+ 13 more} Desired Languages (If blank, desired languages not specified) Travel Requirements Up to 20% Available for Work Visa Sponsorship? No Government Clearance Required? Yes Job Posting End Date