---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Director
Location: Lanham, Maryland, United States
Type: Permanent F/T
Closing Date: 2007-05-04
The Security Director will report to Chief Information Officer and will have
responsibility for risk assessment and prevention, including: information
security, business continuity, disaster recovery, physical security, technical
security and customer and third party audit. The Security Director will build
on current security programs and establish and implement new programs. He/she
will be responsible for hiring and growing the Information Security team,
including the immediate hire of two approved positions.
Essential Tasks and Responsibilities:
 Manage and continuously develop a comprehensive risk based
physical and information security program in accordance with industry best
practices and applicable regulations. uses ISO19977 Security Standards and is
audited annually for compliance.
 Manage our SAS70 Type II annual audits.
 Develop, test, and maintain business continuity plans
 Define the standards for business impact analysis and risk
assessments and ensure compliance using a variety of methods
 Manage a continuous education program to promote the benefits
and principles of our security policies and business continuity
 In conjunction with the CIO, identify and evaluate new
technologies, both hardware and software, for positive or negative impact to
the security and business continuity architecture
 Lead regular Business Continuity and Disaster Recovery
exercises for internal and external clients
 Respond to all external requests related to the information
security program including the response to portions of Requests For Proposals
and acting as the primary liaison for client-driven security audits
 Assist as part of the critical incident team with recovery
processes in the event of a disaster
 Perform continuous monitoring of Business Continuity and
Security programs to ensure compliance with objectives, policies and procedures
 Perform routine monitoring utilizing automated vulnerability
and compliance checking tools to identify unauthorized changes to security
mechanisms in the defined architecture
 Monitor and evaluate vulnerability reports, vendor hot-fixes,
and vendor patches for applicability to deployed technologies
 Monitor changes in legislation and accreditation standards that
affect information security and other areas of risk management
 Be an active participant on the IT Security and Business
Continuity Committees
JOB REQUIREMENTS
---------------------------------------------------
Education and Experience:
 10 years of information technology experience
 8 years in a senior security, risk management or general IT
management role
 Corporate experience with information security strategies,
policies and architecture
 Demonstrated understanding of leading security techniques and
philosophies
 Familiarity with advanced security architecture concepts
 Proven experience with auditing, risk and threat analysis, and
implementing security standards and methods
 Experience working with appropriate senior staff in handling
information security incidents
 CISSP and other related certifications a plus
Salary: $140Kwith 15% Bonus
CONTACT
---------------------------------------------------
If qualified, please send a Word version Resume to:
Jennifer Spadavecchia: Jennifer@altaassociates.com
Alta Associates, Inc
Jennifer Spadavecchia
Senior Recruiter
jennifer@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
