---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: VP, Information Security
Location: London, , United Kingdom
Type: Permanent F/T
Closing Date: 2007-04-07
Incident & Threat Management
Reference No. SF199
Company Global Financial Organisation
Location London
Salary £90,000
Package Banking benefits
Start Date ASAP
No. Required 1
The Role
The role will be responsible for the development, enhancement and/or operation
of the following four areas:
Penetration testing – the role needs to expand the current penetration
testing services being delivered. This will be a combination of low level
scanning undertaken by an external service provider, and deep testing of
applications and infrastructure undertaken partly in-house and partly through a
panel of third party testing organisations. Currently these organisations are
managed out of the US and there is a need for more local involvement and
control in the specification, delivery and management of work undertaken.
Incident management – the role needs to establish and operate a local
incident management system for information security and privacy. Local incident
management processes need to be designed and regular reporting established.
Interfaces need to be established with the other incident alerting and
management systems within ML (such as Global Information Security, Privacy,
Technology, Corporate Security, Office of General Counsel and Leadership and
Talent Management (HR)).
Intelligence – the role needs to develop and operate the intelligence
gathering and analysis mechanisms in an effort to track, analyze, process, and
respond to current and future cyber attacks against the technical
infrastructure, business operations, and/or brand.
Threat management – the role needs to establish and operate the mechanisms
to identify threats to or weaknesses in the infrastructure, and help take
immediate actions — preventing incidents before they negatively impact.
Experience Required:
Essential:
Broad Information Security experience
Deep technical knowledge of application and data security
Deep infrastructure understanding (firewalls, protocols, data storage)
Incident management operations
Hacking techniques
Good network of contacts within the intelligence community
Familiarity with open source intelligence methodologies and approaches
Secondary: (Not required but advantageous)
Check certified
A.Inst.ISP/CISSP/CISM
Solid understanding of the investment banking industry
Personal Attributes Required: (engaging/detail orientated/persuasive etc)
Ability to influence
Ability to articulate complex security issues in simple business terms
Good business and technology analysis skills
Self motivated and well organised – ability to deliver to objectives
within defined timescales
Decision maker
Knowledge of information security legal and regulatory requirements
Problem solver
Excellent negotiation skills
Ability to work as part of a global team
JOB REQUIREMENTS
---------------------------------------------------
Candidates must be eligable to work in the UK when applying
CONTACT
---------------------------------------------------
Information Security Solutions
Iain Sutherland
iain@InformationSecuritySolutions.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
