---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Analyst
Location: Framingham, Massachusetts, United States
Type: Permanent F/T
Closing Date: 2006-05-19
Enterprise Security Analyst
Responsibilities:
· Assist in the development and implementation of a world-class
Risk-based Security Program.
· Work with enterprise planning group in establishing security
procedures and the design and implementation of processes for measuring
compliance with organizational security policies and procedures, including data
collection, data analysis, IT Security Risk Assessments.
· Establish standards, and help assess and select appropriate
technologies for encrypting internal and external communications/data.
· The group is responsible for IT and security compliance,
oversight, and guidance.
· The analyst will work with enterprise customers and clients to
identify solutions, improvements and initiatives, and manage the assessment,
identification, and remediation of enterprise information technology and
security risks.
· The analyst will assist with projects in support of the
enterprise information security program.
JOB REQUIREMENTS
---------------------------------------------------
Requirements:
· Certification related to the security profession (CISSP, SSCP,
CICM, CICA) preferred
· 3-7 years experience in information security.
· Experience as a member or leader of a computer incident
response team, with advanced knowledge of incident investigation, containment,
and recovery techniques, is highly preferred.
· Skilled with enterprise security policies and compliance
processes.
· Experience with security policy and program development
required.
· Skilled working with ISO 17799 and CobiT (preferably v. 4.0).
· Experienced in providing security education and awareness
programs.
· Skilled working with an enterprise security exception process.
· Able to identify solutions, improvements and initiatives, and
manage customer relationships.
· Skilled with the implementation of a Risk-based Security
Program.
· Able to identify, develop and ensure maintenance of security
reporting metrics to support key decision makers.
· Skilled in tracking current and impending legislation,
regulations and best practices to ensure the security program incorporates and
addresses key issues.
· Working knowledge of Payment Card Industry (PCI) standards and
state/federal privacy laws.
· Experience with application development is a plus, including
javascript, Microsoft, and SQL.
· Knowledge of NIST guidelines, including SP 800-30 and 800-34
preferred.
· Knowledge of e-Authentication concepts, Microsoft Windows,
UNIX, and database and telecommunications devices a plus.
· Appropriate candidates should possess a working knowledge of:
TCP/IP networking and routing, Perl, Unix Shell or Windows scripting, Firewall
principles, UNIX and Windows server operating systems,
encryption/authentication technologies, security services involving networks,
firewalls, web servers, DNS administration, LDAP and Relational Database
systems, vulnerability assessments
CONTACT
---------------------------------------------------
Please email your resume to jkong@thesystemsgroup.com.
The Systems Group
Justin Kong
Staffing Coordinator
jkong@thesystemsgroup.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
