---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Consultant
Location: Columbus, Ohio, United States
Type: Permanent F/T
Closing Date: 2007-06-08
This individual is responsible for assessing and analyzing the
organization’s information infrastructure and develop security measures to
safeguard the organization’s information assets against accidental or
unauthorized modification, destruction, or disclosure.
This position will also be responsible for design review, implementation, and
on-going support of security processes and procedures within a global
multi-platform enterprise. In addition, access reviews for profiles, roles,
and practices’ and processes will be analyzed and remediated and audited.
This position will also be responsible for the assessment and the enablement of
wireless security which includes but not limited to desktop security settings,
policies, audits, and configuration recommendations.
This individual will also work with Management on the formation of appropriate
security policies and compliance issues.
Key Work Performed:
• Work with the IT Security Manager to implement and enforce IT Security
policies and procedures.
• Perform reviews/audits of mixed Unix and Microsoft environments,
including network devices, databases, web services, and enterprise applications.
• Perform security assessments
• Communicate IT security vulnerabilities and appropriate corrective
action to IT Security Manager and assist in communicating corrective actions to
applicable IT personnel.
• Evaluate and recommend new security technologies, processes and
methodologies.
• Monitor and oversee patch-management processes
Work with internal/external audit groups on segregation of duties and other
audit related activities
JOB REQUIREMENTS
---------------------------------------------------
• The Security Analyst must be highly conversant & experienced with a
wide variety of information security architectures, security concepts and
techniques, and supporting security tools.
• Extensive knowledge in networking (TCP/IP, topology & security),
operating systems (Windows & UNIX), databases, application security, & web
operations (internet security), and secure remote access capabilities.
• Extensive knowledge of information security best practices.
• Effective project management skills, including the ability to plan,
organize, prioritize, & balance multiple tasks and/or projects to ensure target
dates & goals are achieved.
• Must have effective analytical abilities, strong interpersonal skills &
the maturity & motivation to work effectively across project teams.
• Ability to build relationships & work in a team atmosphere.
• Excellent communication skills, both verbal and written, ability to
work independently towards goals/
• Desire to participate as part of a team; Demonstrate self-confidence,
energy and enthusiasm; Present ideas, expectations and information in a
concise, well-organized way; Manage time well, correctly prioritizing tasks;
Ability to be resourceful, creative and flexible.
• Knowledge of Sarbanes-Oxley (SOX), ISO 17799, OCTAVE; Cobit, and PCI
(Payment Card Industry)
• Knowledge of E-Commerce security best practices
A. Education:
• Bachelor’s degree in computer related field, or equivalent
experience.
B. Experience:
• Minimum 3+ years experience in information security, including
designing, monitoring and assessing security processes, policies and practices
• Experience with multi platform environment including but not limited to
Unix, linux, Windows, Webservices/ Portals, SAP
• Strong understanding of the principles of business operational risk and
• control process and procedures is required
• Strong organization, problem solving and analytical skills
• Ability to develop strong working relationships with customers and end
users
C. Knowledge:
• Extensive knowledge in networking (TCP/IP, topology & security),
operating systems (Windows & UNIX internals), databases, application security,
& web operations (internet security).
• Extensive knowledge of information security best practices.
• Effective project management skills, including the ability to plan,
organize, prioritize, & balance multiple tasks and/or projects to ensure target
dates & goals are achieved.
• Must have effective analytical abilities, strong interpersonal skills &
the maturity & motivation to work effectively across project teams.
• Ability to build relationships & work in a team atmosphere.
• Excellent communication skills, both verbal and written, ability to
work independently towards goals
• Desire to participate as part of a team; Demonstrate self-confidence,
energy and enthusiasm; Present ideas, expectations and information in a
concise, well-organized way; Manage time well, correctly prioritizing tasks;
Ability to be resourceful, creative and flexible
• Knowledge of Sarbanes-Oxley (SOX), ISO 17799, OCTAVE; Cobit, and PCI
(Payment Card Industry)
• Knowledge of E-Commerce security best practices
CONTACT
---------------------------------------------------
Please forward a word version of your resume to Jennifer@altaassociates.com.
Jennifer Spadavecchia
VP Technology Risk Recruiting
jennifer@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
