---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Manager, Information Security
Location: Montvale, New Jersey, United States
Type: Permanent F/T
Closing Date: 2006-07-24
KPMG LLP provides audit, tax and advisory services to a broad range of clients.
KPMG’s commitment to its clients is demonstrated in our client service
delivery approach with cross-functional teams that extend across industry
segments. We are currently seeking an Information Security Project Manager to
join us in our Montvale office.
RESPONSIBILITIES:
• Act as the primary point of contact between Information Technology (IT)
project teams and the IT Risk and Security group to help ensure that
appropriate security resources are scheduled and that security-related project
objectives and timelines are met
• Evaluate IT risks associated with projects throughout their project
lifecycle and determine the residual risk prior to deployment/implementation
• Advise and assist ITS project teams regarding compensating control
alternatives where security requirements can not be met
• Help ensure timely completion of Risk and Security in Project (RASP)
deliverables
• Escalate security and risk issues that are identified with an IT
project to leadership in a timely manner
• Assess IT projects for compliance with applicable standards and policies
• Create, design and assist in the performance of application and system
security test plans
• Educate project teams on KPMG's applicable standards and policies
• Liaise with IT and other representatives of assigned business functions
to help ensure that project pipelines are understood and that project
priorities are reflected in IT Risk and Security’s resource planning
JOB REQUIREMENTS
---------------------------------------------------
QALIFICATIONS:
• Bachelor of Science (or Arts) from an accredited college/university
• A CISA and/or CISSP designation
• An information security generalist who has a strong technical
background
• A good understanding of various areas of IT risk and security controls
with specialist knowledge in some, if not all, of the following:
o Secure network design
o Authentication and authorization mechanisms for enterprise systems
o Logical access control mechanisms within operating systems and
applications
o Microsoft products (Windows 2003, Active Directory, Exchange, SQL and
.NET)
o Web Application architecture, design and security principles
o Client server applications architecture, design and security principles
o Firewall architecture and Intrusion monitoring
o Encryption technologies (SSL, IPSEC, SSH, etc).
• Practical and/or consulting experience (at least five years) in some or
all of the following areas:
o system management / administration
o system development controls
o user and access control administration
o penetration testing
o information security audits
o emerging legal and regulatory issues associated with IT in the US and
Global environments e.g., privacy, data breach notification, client
confidentiality
• A good understanding of KPMG's business goals and strategies
• Excellent communication skills
• A demonstrated capability in written and spoken English
• Able to travel internationally
KPMG offers and supports flexible work arrangements as well as part-time
schedules. We also offer a comprehensive compensation and benefits package.
Interested? Please send your resume referencing Code 06840288. We strongly
encourage you to apply online at www.kpmgcareers.com referencing the Job Code
indicated above; resumes received through our Web site are available for
consideration as early as the next business day. Alternatively, you may send a
CONTACT
---------------------------------------------------
rmnair@kpmg.com
KPMG LLP
Rithesh Nair
Recruiter / Researcher
rmnair@kpmg.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
