---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Director, Information Security
Location: Lanham, Maryland, United States
Type: Permanent F/T
Closing Date: 2007-03-05
The Security Director will report to Merkle’s Chief Information Officer
and will have responsibility for risk assessment and prevention including:
information security, business continuity, disaster recovery, physical
security, technical security and customer and third party audit. The Security
Director will build on Merkle’s current security programs and establish
and implement new programs. He/she will be responsible for hiring and growing
the Information Security team, including the immediate hire of two approved
positions.
Essential Tasks and Responsibilities of the Security Director:
Manage and continuously develop a comprehensive risk based physical and
information security program in accordance with industry best practices and
applicable regulations. Merkle uses ISO19977 Security Standards and is audited
annually for compliance.
Manage our SAS70 Type II annual audits.
Develop, test, and maintain business continuity plans
Define the Merkle standards for business impact analysis and risk
assessments and ensure compliance using a variety of methods
Manage a continuous education program to promote the benefits and
principles of our security policies and business continuity
In conjunction with the CIO, identify and evaluate new technologies,
both hardware and software, for positive or negative impact to the security and
business continuity architecture
Lead regular Business Continuity and Disaster Recovery exercises for
internal and external clients
Respond to all external requests related to the Merkle information
security program including the response to portions of Requests For Proposals
and acting as the primary liaison for client-driven security audits
Assist as part of the critical incident team with recovery processes in
the event of a disaster
Perform continuous monitoring of Business Continuity and Security
programs to ensure compliance with objectives, policies and procedures
Perform routine monitoring utilizing automated vulnerability and
compliance checking tools to identify unauthorized changes to security
mechanisms in the defined architecture
Monitor and evaluate vulnerability reports, vendor hot-fixes, and
vendor patches for applicability to deployed technologies
Monitor changes in legislation and accreditation standards that affect
information security and other areas of risk management
Be an active participant on the IT Security and Business Continuity
Committees
JOB REQUIREMENTS
---------------------------------------------------
Qualified candidates should possess:
10 years of information technology experience
8 years in a senior security, risk management or general IT management
role
Corporate experience with information security strategies, policies and
architecture
Demonstrated understanding of leading security techniques and
philosophies
Familiarity with advanced security architecture concepts
Proven experience with auditing, risk and threat analysis, and
implementing security standards and methods
Experience working with appropriate senior staff in handling
information security incidents
CISSP and other related certifications a plus
CONTACT
---------------------------------------------------
Please submit your resume to jobs@merkleinc.com or apply to the Security
Director via our careers page at www.merkleinc.com.
Merkle Inc.
Allison Leshine
aleshine@merklenet.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
