---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Engineer
Location: Chicago, Illinois, United States
Type: Permanent F/T
Closing Date: 2006-12-15
My client is a large healthcare organization in the Chicago area. I'm working
with the manager of their security verification and validation team. This team
is responsible for responding to gaps and security vulnerabilities that have
been identified by the security assessment team. Every situation is different
and requires a tailored solution. Once the gaps have been remediated this team
will do the testing and validation to ensure that the problem has been fixed
and is in line with corporate security requirements. This is a great job for
somebody with technical depth who likes creative problem solving and a variety
of different challenges.
Basic Function:
This position is responsible for assisting in the design and implementation of
and leading the operation of an IT security issue remediation process. The
individual will work with internal and external organizations in understanding
and tracking security issues and recommendations. Mitigation plans and time
lines will be developed in conjunction with issue owners. Validation and
testing plans will be developed and documented to provide assurance that issues
have been closed. Regular security issue status reports will be developed for
various levels of management
JOB REQUIREMENTS
---------------------------------------------------
Position Requirements:
1) 3 years of work experience in IT security, IT assurance, and/or IT audit
with a Bachelor Degree in Information Technology OR 4 years of work experience
in IT security, IT assurance, and/or IT audit with a College Courses in
Information Technology OR 5 years total experience in IT security, IT
assurance, and/or IT audit:
2) Experience conducting security gap analysis, policy and procedure reviews,
network risk assessments, penetration testing, application assessments, and
remediation testing in large enterprise environments.
3) Experience documenting findings and presenting results to technical and non-
technical management teams.
4) Ability to act as a team lead with little guidance, planning executing, and
reporting project results. Provide guidance to staff team members.
5) In depth, hands-on security experience in as many as possible: Server
configuration reviews, firewall and router configuration reviews, penetration
testing, network security, web application security reviews, security
architecture.
6) In depth understanding of auditing and compliance verification and
validation methods, specifically testing, documentation, and reporting.
Preferred Position Requirements:
1) Certified Information Systems Security Professional (CISSP) or other
relevant IT security certification
2) Knowledge of business governance frameworks such as COBIT
3) Knowledge of HIPAA’s impact on IT security requirements.
4) Bachelors degree in computer science, information systems, or related
discipline.
5) Ability to map regulatory guidance to IT security controls.
6) Experience in a managed health care or other insurance or financial services
organization.
CONTACT
---------------------------------------------------
If qualified please send your resume in WORD format to
jordan@altaassociates.com
Alta Associates, Inc.
Jordan Roznowski
Executive Recruiter
jordan@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
