---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Manager, Information Security
Location: Manhattan, New York, United States
Type: Permanent F/T
Closing Date: 2006-03-19
Roles & Responsibilities:
The Privacy & Security Policies & Procedures (PSPP) Manager reports to the IS&P
PMO Director (Vice President).
The PSPP Manager is responsible for the review and update of the IS&P policies
and procedures. He/she will responsible for enhancing, developing and
communicating to all employees of the information security and privacy policies
and procedures. The role requires interaction with Technical, Business and OGC
as well as internal IS&P departments such as the Awareness, Communications and
Education team, the Threat Management team, IS&P information Security and
Privacy Officers and PMO.
Job Function
• Identify leading security and privacy practices and determine
applicability to the business segments and corporate functions.
• Identify and establish compliance with US and international regulatory
requirements defined for the security of information, personal data and
intellectual property.
• Continually review and develop global security (and privacy) policies
and Procedures.
• Consult with other groups to determine their security (and privacy)
needs in order to write policy and procedures that effectively support the
business.
• Help build consensus on new or revised policy and procedure language.
• Draft and review information security and privacy policy.
• Draft security issue level policies (and privacy where appropriate)
• Design Content and Deployment for awareness campaign
• Design Compliance program and evaluate required tools
• Compile Policies & Procedures Compliance metrics
• Design Compliance Management Reports
• Day to day maintenance and control of documents and central repository
for the IS&P Security and Privacy policies, standards, guidelines and processes;
• Creation of monthly executive briefings and other presentations as
requested; and
• Monitoring and assessment of pending and approved regulatory US
(federal/state) and International Security and Privacy requirements impacting
the IS&P policies and Procedures.
• Coordinating Privacy and Information Policies & Procedures meetings.
• Managing day to day Privacy and Security policies and procedures
projects and providing and maintaining the weekly status updates to the PMO.
• Escalating Policies and Procedures related issues and risks to the PMO.
JOB REQUIREMENTS
---------------------------------------------------
Education, Experience Requirements and Skills
Possess 8-10 years of professional experience within the financial services
industry, and knowledge of US and international information security and
privacy legal and regulatory requirements.
o Degree in communications, law is required.
o Excellent writing, organizational, communication and leadership skills
are essential.
o Working knowledge of common security and privacy regulations and
standards, including ISO 17799, HIPAA, etc.
o Technical writing experience
o CISSP, GIAC, CIPP, or other relevant certification;
o Regulation review
o Policy documentation
o S-Ox controls testing and documentation
o Security & Privacy Metrics
The successful candidate should have the following personal attributes and
behavioral characteristics:
o Interpersonal skills: Verbal communication, Written communication,
Assertiveness, Conflict Management
o Leadership skills: Individual leadership, Leadership of change,
Mentorship, Motivation
o Planning
o Facilitation
o Coaching and development
Salary: $100,000.00
Job Order# 1013-JS
CONTACT
---------------------------------------------------
Please submit a Word Version Resume to:
jennifer@altaassociates.com
Alta Associates
Jennifer Spadavecchia
Senior Recruiter
jennifer@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
