Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [SJ-JOB] Jr. Security Analyst, Melville |
|---|---|
| Date: | 14 Mar 2008 19:48:00 -0000 |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Jr. Security Analyst Location: Melville, New York, United States Type: Permanent F/T Closing Date: 2008-04-05 MSC Industrial Supply, Co. is a NYSE-listed leading direct marketer and distributor of industrial tools and supplies, with over 60 years of success. MSC has a high energy, challenging and exciting culture. We encourage each of our Associates to realize their fullest potential as individuals and members of the team. We have an immediate opportunity for an Information Security Analyst. DUTIES and RESPONSIBILITIES: Assists in managing the overall IS security policies and procedures to protect MSC's business and ensure that we are in compliance with internal and external auditing requirements. Maintains IS security policies, including applications, systems, networking and user access. Assists in the performance of periodic risk assessments that identify current and future security vulnerabilities. Works cross-functionally with IS and the business to determine what levels of risk are acceptable and determines ways to reduce information security risk. Work with MSC departments, associates, and business partners to ensure understanding of business needs and that IS security policy both protects and facilitates MSC's business. Communicates to IS and the business what the IS Security policy and procedures are so that there is an understanding and compliance. Handle day-to-day processes of IS Development and IS Operations change management. Administer user access r ights for JD Edwards finance application. Assist with IS audits; work with Internal Audit Department (IAD) and external auditors on IS Sarbanes-Oxley compliance. Tracks all open audit items. Works with IS Management Team to address and resolve all open audit items. Assists with the clarification of individual information security responsibility and accountability so that necessary information security efforts are consistent across MSC. Works cross-functionally as part of the Disaster Recovery and High Availability Teams. Travels to CFCs, Call Centers, branches and customer sites to ensure cross-functional understanding and business knowledge. Maintains positive, proactive relationships with all outside vendors necessary for the IS Information Security area. Develops in-depth knowledge of IS security technologies and their potential application to MSC's business strategy. Participates in special projects and performs additional duties as required. JOB REQUIREMENTS --------------------------------------------------- EDUCATION and EXPERIENCE: Bachelor's degree or comparable business experience is required. Minimum of three years IS experience either in Application Development, or in Operations technically supporting related platforms (AS400, Cisco, Windows). One year of experience in some information security function. SKILLS: Understanding of IP networking (TCP/IP, data communications, switchers, routers and network management) is required. Understanding of basic information security concepts (change management, user access) is required. Familiarity with the Windows or AS400 operating system and architecture is required. Familiarity with JD Edwards World is preferred. Excellent verbal and written communication skills are required. Strong documentation skills, organizational and management skills are required. Experience in project management is required. Experience with development, communication and implementation of security architecture/engineering concepts is preferred. MISCELLANEOUS: Valid driver's license and the ability to travel up to 25% are required. We offer a competitive salary and benefits plan, including medical/dental, 401K, tuition reimbursement, and career advancement. Bring your skills to MSC and team up with an industry leader today! MSC is an Equal Opportunity Employer. CONTACT --------------------------------------------------- To apply, please refer to our website at www.mscdirect.com/careers, and search for tracking code #7655 to submit your resume directly. MSC Industrial Supply Co., Inc. --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [SJ-JOB] Sales Engineer, Nashville, nomail |
|---|---|
| Next by Date: | [SJ-JOB] Penetration Engineer, West Sussex, iain |
| Previous by Thread: | [SJ-JOB] Sales Engineer, Nashville, nomail |
| Next by Thread: | [SJ-JOB] Penetration Engineer, West Sussex, iain |
| Indexes: | [Date] [Thread] [Top] [All Lists] |