---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Analyst
Location: Toronto, Ontario, Canada
Type: Permanent P/T
Closing Date: 2005-12-18
Title: Sr. IT Security Specialist Position #26940.doc
Reporting to: Director Technology and Planning
Role/Purpose:
Sr. IT Security Specialist, responsible for the planning, design,
implementation, and monitoring of security measures, methods and procedures
which safeguard the integrity of and access to corporate systems. Ensures IT/IS
compliance with Information Security policies, processes, controls and
safeguards of classified electronic information. The incumbent is required to
maintain knowledge of both changing technologies and business requirements and
provide recommendations for appropriate adaptation of the security environment
to meet new demands. Additionally, this individual is charged with recognizing
and identifying areas where security policies and procedures require change, or
new ones need to be developed. Sr. IT Security Specialist may have supervisory
responsibilities for other Security staff members.
Duties and Responsibilities:
·Provide subject matter expertise in security technology and practices
to comply with information security.
·Produce incident reports as required.
·Work with project and infrastructure teams to evaluate and recommend
security processes and technology to reduce risk gap to meet IS security policy
compliance
·Provide interpretation of information security policies and supporting
documents to assist IS/IT in policy-compliant development, deployment and
operation of systems and processes
·Investigate reported information security incidents to determine root
cause and preventative actions.
·Produce periodic reports to management related to information security
metrics.
·Participate in review of policies and procedures.
·Provide security experties on internal investigations of conformance
between practice and information security policies/procedures.
·Vendor management for forensic analysis
·Policy Compliance Monitoring
·Risk Analysis assessments
·Management of Computer Security Incident Response Team (CSIRT) and
associated policies and procedures.
·Create and monitor automated compliance capabilities
·Liaise with U.K. security team on technology, practices and threats
JOB REQUIREMENTS
---------------------------------------------------
Requirements:
·10+ general IT/IS operations experience with 6+ years experience in the
IT/IS security
·Bachelor's or College degree in Information Systems, Computer Science
or related field.
·CISSP or comparable Certification
·Strong communications skills (written and verbal)
·Ability to clearly communicate with technical and non-technical
personnel
·Ability to prioritize and deliver on multiple project/task deadlines
·Comfortable presenting and speaking across all organizational levels.
·Self-starting, self-motivated, willing and able to work odd hours to
complete critical tasks in a timely manner
·Comfortable working in a fast paced, dynamic and event driven
environment while adhering to relevant procedures.
Desired Knowledge/Skills:
·BS7799/ISO17799 Information Security Standards
·Network and firewall technology
·IPSEC and other VPN technology
·TCP/IP
·PKI
·Unix, Windows and Linux Operating systems
·Websense
·Intrusion Detection/Prevention Systems
·Internet Content Management
·E-Mail Content Management
·Centralized Log Monitoring
·RSA SecurID and/or other two-factor authentication technology
·Microsoft Office products (i.e. Word, Excel, Access, PowerPoint)
CONTACT
---------------------------------------------------
Please apply through our Corporate web site:
www.directyourenergy.com
Direct Energy
Laurie Morris
Recruitment Consultant
laurie.morris@directenergy.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
