---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Auditor
Location: Parsippany, New Jersey, United States
Type: Permanent F/T
Closing Date: 2006-05-20
Job Purpose
Corporate Audit offers a 24-month assignment and an opportunity for exciting
and challenging engagements, exposure to the company’s diversified
operations and high-level visibility with Corporate and SBG management
globally. This is an opportunity to work in diverse teams, cultivate leadership
abilities and develop skills in IT, Data Privacy and Compliance. This
opportunity is also structured for candidates to take on roles of increasing
responsibilities in SBGs or in Corp after successful completion of assignment.
Responsibilities of the Position
The incumbent will lead IT risk assessment, pre-audit planning and conduct
objective audit reviews on a variety of data privacy areas globally across the
company’s diversified SBGs.
This shall include conducting audits to identify data privacy and information
security risks and propose actions to mitigate those risks across the US,
Canada, EU, APEC & Australia and Latin America. The candidate should build
strong relationships with our Corporate Data Privacy function, the Law
department, HR, IT Leadership, Corp audit and will manage our co-source
relationship with third party audit firm in the data privacy area.
Also this incumbent will work with other worldwide IT functions and the data
Privacy function to effectively deliver IT Audit solutions for data privacy and
information security compliance.
Key Success Factors (specific expectations during next 6 – 18 months)
• Lead development, planning, and execution of global data privacy IT
Audit Strategy.
• Develop robust IT audit processes for data privacy using 6 sigma
methodologies leveraging world-class standards and audit metrics.
• Manage co-sourced IT/Data Privacy Audit projects/relationship with 3rd
party audit firm.
• Develop strong relationship with leadership and external customers.
Attributes/Skills Required/Sought
• Strong expertise in the area of data privacy and information security
as they relate to IT systems and experience with critical processes in global
data privacy compliance.
• Knowledge of definitions, concepts and applications of U.S. and
international privacy laws and information management practices as well as the
privacy implications of emerging technologies. This includes the EU-US Safe
Harbor Agreement, Sarbanes-Oxley, EU Data Protection and E-Communications
Privacy Directives (including national information security standards
implementing them), employee records management, workplace monitoring,
contingency planning, incident handling, and Internet Privacy (including
CAN-SPAM Act) among others.
• Maintains current knowledge of applicable foreign, federal and state
information security standards, including ISO 17799 and use of encryption, and
monitors advancements in privacy and information security technologies to
ensure organizational adaptation and compliance.
• Proficiency in key audit elements of data privacy such as Data
Sensitivity, collection processes, storage techniques, complexity of processing
and interfaces, sharing of data with third parties, and technical,
organizational, and physical information security policies and procedures.
• Excellent project management, audit, analytical, problem solving, and
organizational skills.
• Strong oral and written communication skills with experience
interacting with and presenting to senior executives.
• Strong interpersonal skills with the ability to facilitate diverse
groups and work with all levels of internal and external customers.
• Proactive leader who can work inter-dependently and easily adapts to
change.
JOB REQUIREMENTS
---------------------------------------------------
Experience/Education Required/Sought
• Bachelors Degree in Business Administration, Computer Science, Law or
related field.
• Minimum of 5-8 years experience working on data privacy and/or
information security issues and/or in an IT controller and/or Audit leadership
positions.
• Project management and proven experience in successful implementation
of global privacy/information security policies and procedures and driving
compliance on data privacy and/or information security.
• Six Sigma Green Belt/Black Belt experience certification preferred.
• Big 4 experience strongly preferred with CISSP, CISA certification.
CIPP certification with knowledge of HIPAA guidelines desirable.
• Knowledge of export control regulations desirable.
Position requires up to 65% travel. Candidates should be preferably based out
of Parisppany, NJ.
CONTACT
---------------------------------------------------
If qualified and interested, please send a Word version resume to Erin AT
altaassociates DOT com
Alta Associates, Inc.
Erin Fallon
Executive Recruiter
erin@altaassociates
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
