---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Technology Risk Consultant
Location: Washington, District of Columbia, US
Type: Permanent F/T
Closing Date: 02/24/2005
My Client is looking for a Technical Risk Specialist in the Information
Security Management area. This person will have responsibilities within the
security policy, standards and communications team. Specific responsibilities
will include: Business unit liaison for operational risk management activities.
Security initiatives include: security and privacy guidance, information asset
management, risk assessment and security training. Building strong and
effective relationships with business unit(s). Understanding business unit
processes in detail. Leading security initiatives within the business/security
cross functional team
Key role in the communication of security and privacy policies/standards within
the cross functional team and across the enterprise. Engaging multi-business
and multi-functional efforts in the implementation of these policies across the
enterprise.
Communicating business unit plans, strategies, and initiatives to information
security management group. Working with the Director of Information Security
Policy, Standard and Awareness, the individual will interact with management
within selected business units, Legal, Audit, and ESO. This individual will
have to quickly integrate his/her security and privacy knowledge with the
Organizations business and its complexities. This position will require
extensive consultative skills and relationship building, with both the business
units and ESO teams. The sr. technical risk specialist must have excellent
communication, documentation, and presentation skills to facilitate close
cooperation among selected business units. Approximate distribution of time
among various responsibilities is as follows: *(65%) Develop/Revise Security
and Privacy policies and standards.*(20%) Develop and track detailed project
plans and provide detailed reports of progress against plans. *(15%) Develop
and mentor staff.
JOB REQUIREMENTS
---------------------------------------------------
Qualifications
Education: Bachelor 's degree in Computer Science, Information Security
Management or related field, or an equivalent combination of education and/or
experience. Advanced degree preferred.
Required Experience: Five years or more work experience directly related to the
area of Security and Privacy policy. Minimum of three years consultative
experience working with external customers. Expert knowledge of security
industry practices and standards, specifically experience implementing ISO
17799 and other leading standards, e.g. NIST. Operational knowledge of Risk
Assessment methodology. Operational knowledge of project planning, full system
life cycle management methodology. Highly developed interpersonal,
communication (oral and written), research, and analytical skills. Abilities
must include excellent communication (oral and written) skills with senior
executives. Excellent presentation skills. Excellent data
collection/interviewing skills. The ability to work with minimal guidance and
have expert interpersonal, communication (oral and written), presentation,
planning, research, and analytical skills. The ability to quickly integrate
disparate writings into a si
ngle work with a uniform voice and appropriate technical writing style.
Desirable Experience: Experience working with CobIT, COSO or FISCAM. Experience
working with the financial services or healthcare industry.
CONTACT
---------------------------------------------------
If you are interested in this opportunity please forward a word version of your
resume to Jennifer@altaassociates.com
Thank you!
Jennifer Spadavecchia
Senior Recruiter
Alta Associates, Inc.
jennifer@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
