IAM Operations Manager-Cyber Managed Services - Operate

Overview

Lead operational delivery across identity and access management activities within PwC's Cyber Managed Services practice, coordinating shift activities, escalations, and service levels in a managed services environment.

What you'll do

• Lead cybersecurity operations across assigned shifts for identity and access management, security monitoring, vulnerability management, and security operations
• Validate incident triage, escalation handling, and response actions for access requests, alerts, and vulnerabilities
• Monitor ticket queues, service levels, backlog trends, and response times across multiple operational workstreams
• Coordinate handoffs, shift logs, and status reports to support continuity of service and clear communication
• Coach analysts on triage methods, workflow adherence, documentation practices, and escalation criteria
• Review case details, incident evidence, and remediation actions to support accurate resolution and record keeping
• Track operational health checks for SIEM, EDR, IAM, scanning tools, firewall logs, and cloud telemetry sources
• Identify recurring issues and route them to platform, engineering, or tower leads for resolution
• Support major incident response by directing timelines, communication, and task prioritization during the shift
• Apply security incident management, threat detection, and vulnerability management skills to improve workflow performance
• Identify opportunities for automation, alert tuning, and workflow refinement using scripting and SOAR concepts

What you'll need

• At least a Bachelor's degree
• At least 4-8 years of experience
• Oral and written proficiency in English

Nice to have

• Preference for at least one of the following fields of study: Business Studies, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems
• At least one of the following: One or more certifications aligned to incident response and cyber defense, including GIAC (eg., GCFA, GCIA, GCIH) or equivalent incident response credentials
• Demonstrating IAM operations leadership across cybersecurity managed services and shift coordination
• Managing SOC, SecOps, vulnerability, and identity workflows in 24/7 environments
• Coaching analysts through triage, escalation handling, and documentation practices
• Utilizing SIEM, EDR, ITSM, IAM, and vulnerability management tools
• Communicating clearly with client stakeholders during incidents and operational handoffs