---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Manager, Information Security
Location: Boston, Massachusetts, United States
Type: Permanent F/T
Closing Date: 2006-04-21
This individual will be responsible for the implementation of audit assistance
and coordination program, including documentation and web site updates.
Interface with management (technology, operations, risk management, security),
legal department, designated business unit contacts, and service auditors on
scope of work changes and contract amendments. In addition, the candidate will
provide technical consultation, guidance, and assistance to management and
users in reference to security policy clarification and appropriate security
architectures.
JOB REQUIREMENTS
---------------------------------------------------
1. Understand existing processes in information and network security;
identify deficiencies; recommend improvements; and develop value-added
processes and procedures.
2. Interface with both internal and external auditors as the central
point-of-contact for the Corporate Information Security group.
3. Coordinate all narrative updates and document requests from auditors.
4. Assist in quarterly Sarbanes-Oxley testing of the Corporate Information
Security internal control environment.
5. Develops and gains approvals from all stakeholders of standard
collaterals for customer response.
6. Develops and maintains contractual obligations related to technology
and risk and communicates these to all stakeholders.
7. Communicate and advise on appropriate security and regulatory compliance
8. Develop security mitigation strategy.
9. Design, implement and manage reporting and data collection systems to
support audits across the technology environment
10. Develop analysis and derive trends from data provided by various audits
for purposes of reporting to management
11. Prepares high level reporting on audits across the organization for
Senior Management review.
12. Other duties as required.
 Over five years experience in IT audit and planning, risk
assessment, and/or business continuity planning.
 Technical or professional certifications, such as CISA or
CISSP, are highly desirable.
 Bachelor's degree required, preferably in computer science or
information systems.
 Must possess excellent written and verbal communication skills,
with a proven track record of interacting effectively with end-users and
technology professionals.
 Experience in the following regulations or standards would be a
plus: GLBA, Sarbanes-Oxley, US Patriot Act, ISO 17799 among others
 Strong project management skills
 Strong networking and negotiating skills
 Able to work on multiple projects concurrently, manage time
effectively, and require minimal supervision in the execution of a project.
 Must possess strong analytical capabilities and have a desire
to learn new things
CONTACT
---------------------------------------------------
Please submit a Word Version Resume to:
John@altaassociates.com
Alta Associates, Inc
John Ahn
Senior Recruiter
john@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
