---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Technology Risk Consultant
Location: Los Angeles, California, US
Type: Permanent F/T
Closing Date: 06/08/2005
The Technology Risk Consultant will work with project teams and resources to
ensure that IT Security Policies and Best Practices are followed as systems,
products and services are designed, built, deployed and upgraded.
Responsibilities include:
• Evaluate security requirements, safeguards, vulnerabilities, threats
and risk
• Provide risk mitigation strategies
• Conduct Threat Risk Assessments
• Participate in project and product development lifecycles by:
evaluating requirements interviewing stakeholders providing questions and
feedback evaluating technical solutions managing security testing producing
appropriate reports and following up on recommendations
• Integrate best practices into solutions from sources such as COBIT,
HIPAA, ISO17799, NIST, and CERT
• Interact with clients and partners as part of the client engagement
lifecycle, evaluating business requirements and analyzing security requirements
• Present Threat and Risk Assessments and other security assessment
findings to the client
Act as project lead and provide guidance to other team members
• Manage Vulnerability Assessments and Pen Testing, interpret test
results, and advise in the preparation of use cases
• Act as a mentor and technical authority for the security team, helping
to develop and expand the knowledge base within the company
JOB REQUIREMENTS
---------------------------------------------------
Desired qualifications:
• Four or more years of qualified experience
• Experience in IT risk and control, systems/network audit, technical
configuration reviews and project management, plus at least one area of
technical security expertise
• Proven ability to define business and technology requirements as they
relate to privacy and security
• A solid understanding of various information systems technologies
including: LAN and WAN firewalls Internet protocols and applications secure
communications PKI role-based access control (RBAC) and identity management.
• Knowledge of the ins and outs of Technology Risk Assessment and other
risk assessment methodologies and tools, familiarity with related security
tests and test methodologies
• Knowledge of regulatory and compliance standards, privacy issues, ISO
17799, GLBA, HIPAA, and the ITIL Framework are assets
• CISSP designations and consulting experience are assets
CONTACT
---------------------------------------------------
If interested please send your resume in word format to:
erin@altaassociates.com
Erin Fallon
Research Associate
Alta Associates
erin@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
