Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Jobs
[Top] [All Lists]

[SJ-JOB] VP, Information Security, New York

Subject: [SJ-JOB] VP, Information Security, New York
Date: 23 Aug 2005 17:25:34 -0000
---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       VP, Information Security
Location:       New York, New York, United States
Type:           Permanent F/T

Closing Date:   2005-09-22

Information Security Risk Officer - $150K plus Bonus- New York, NY

I am currently conducting a search for an Information Security Risk Officer.   
This is an exciting opportunity to become a key member of a team that will 
shape the strategy and objectives of the new group.

As part of the establishment of the Operational Risk Group, we are looking for 
an Information Security Risk Officer. The Risk Officer will be responsible for 
coordinating any activities around information security risks with the 
respective IT Risk Control and liaising with security counterparts within IT 
Infrastructure areas, division-wide across all of our global locations.   The 
candidate will be expected to define IT security and physical security related 
policies and best practices and coordinate their implementation.  We are 
looking for candidates with a strong technology background and a proven track 
record in a senior capacity. Coordinating a global team, the role holder’s 
global and cross-divisional responsibilities will include:

Responsibilities:

•Define and implement  ‘best practice’ risk identification, 
monitoring, measurement and reporting for various types of information security 
risks; liaising with cross divisional colleagues to ensure a common framework 
is in place.
•Identify & prioritize security risks and recommend mitigating controls 
(Including, but not limited to source code controls, password controls, virus 
protection, remote access, single sign-on technology, physical security 
standards, incident management)
•Define and deliver a global security education program to improve overall 
awareness of security policy and individual employee responsibilities.
•Investigating, reporting and responding to security-related events.
•Provide leadership to Business Continuity Management
•Review new technologies and their proposed use; define a security signoff 
process before technologies are put into production environment.


Additionally, we expect the role holder to participate in related activities, 
such as:

•Help promote and instill a culture of operational risk excellence across 
the organization.  Participate in training/education initiatives.
•Support the firm-wide initiatives as part of the Operational Risk 
Excellence (OREX) program.
Interface with Legal & Compliance and other logistics control functions on 
identification and mitigation of other operational risk situations



JOB REQUIREMENTS
---------------------------------------------------
Qualifications:

•Extensive (multi-year) experience in asset management/financial services 
business with good understanding of the full trade cycle / value chain.  
•Proven track record in a senior Information Security/IT Security Risk 
Management capacity, covering many of the before mentioned responsibilities.
•Good understanding of operational risk principles.
•Strong “Management of Change” leadership skill set and 
successful project management experience.
•Sound communication abilities to facilitate communication between 
multiple parties.  Good relationship-builder.
•Ability to articulate highly technical information into real world 
business impact at a senior management level.
•Proven structured approach to managing and resolving complex issues
•Holder of certifications in any of the following areas is a plus:
oCertified Information Security Systems Professional (C.I.S.S.P)
oCertified Information Systems Auditor (C.I.S.A)
oCertified Information Security Manager (C.I.S.M)
oGIAC Information Security Officer (G.I.S.O)
oGIAC Certified Incident Handler (G.C.I.H)





CONTACT
---------------------------------------------------
To be considered for this opportunity please submit a word version of your 
resume to Jennifer@altaassociates.com.



Alta Associates
Jennifer  Spadavecchia
Senior Recruiter
jennifer@altaassociates.com



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.securityfocus.com/jobs

<Prev in Thread] Current Thread [Next in Thread>
  • [SJ-JOB] VP, Information Security, New York, jennifer <=