Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Jobs
[Top] [All Lists]

[SJ-JOB] Manager, Information Security, Cleveland

Subject: [SJ-JOB] Manager, Information Security, Cleveland
Date: 18 Apr 2008 20:21:12 -0000
---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       Manager, Information Security
Location:       Cleveland, Ohio, United States
Type:           Permanent F/T

Closing Date:   2008-05-17

Job Description:

Primary responsibilities include focusing on the support of all offshore 
compliance activities for our financial services client. Multi-Lingual is not 
required but would be a great benefit. 

Specific Duties include: 

->Working closely with Client's indidivual business units and offshore 
providers to ensure the integrity of current controls, 

-coordinating with new engagements, 

-monitoring offshore resources and contributing to future designs. 

Details of Offshort Projects and All Third party Initiatives: 

Candidate will effectively act as a Consultant towards all new Offshore 
Projects/Initiatives via: 

-Attend meetings and discussions regarding new or ongoing offshore 
projects/initiatives to ensure they meet IP Compliance standards to protect the 
Client's confidential or secret data 

-Lead offshore security governance meetings once a month to discuss outstanding 
issues and initiatives with offshore environments 

Review Controls to Secure Offshore Environment 

-Visit offshore facilities once a year to review controls and procedures in 
place 

-Evaluate new tools that help reduce risk of breaches of confidential or secret 
data 

-Work with IP teams to implement new controls or strengthen existing controls 
of offshore access 

-Develop and define reports as necessary to track offshore users, projects, 
roles, issues, and remediation efforts 

-Review requests for exceptions or deviations from Customer Data Protection 
Standards and determine if mitigating controls exist to effectively protect 
confidential or secret data 

Manage Offshore Roles and ODC Access Requests 

-Work with offshore Business Relationship Managers, Project Managers, and 
Enterprise Role Team to define and develop new roles for offshore resource 
access to all client systems 

-Process requests for new offshore resources to be added to roles or changes to 
existing role memberships 

-Review and approve requests for new offshore resources and visitors 


Develop Documentation to oversee Offshore Activities 

-Modify or draft policies or standards as necessary, such as Offshore Security 
Plan or Customer Data Protection Standards, to protect confidential and secret 
information 

-Modify or draft processes such as Offshore Project Process to guide project 
managers through the process of determining steps to offshore project in a 
secure and consistent manner 

-Modify or draft descriptive documents such as Offshore Compliance Plan to show 
activities in place to monitor controls of offshore environment on a regular 
basis

Company Information
Very large (Multi $BB), publicly traded financial services client.


Benefits/Salary
Excellent salary and benefits commensurate with experience, credentials.




JOB REQUIREMENTS
---------------------------------------------------
Requirements
-Bachelor's degree or equivalent experience required. 

-Banking and financial services background is preferred. 

-CISSP or CISA certification is preferred. 

-Excellent communication, presentation skills to both security staff and 
security management. 

-Ideally, The preferred candidate should have several years of experience 
within IT security or Security technologies , spanning multiple security or 
technical domains (including the CBK of the (ISC)2). 

-Demonstrated ability to identify relevant security risks within various 
business process while proposing mitigation controls to address those risks. 

-Strong Ability to present technical concepts to non-technical audiences, 
including senior management of the financial services firm 

-Innate ability to manage conflict in a positive, professional manner.



CONTACT
---------------------------------------------------
Please send resume, and contact:
Frank Cirino, Jr., CISSP
216 292 2855 *121 office
216 390 1492 Cell
FCirino@Marvelconsultants.com

28601 Chagrin Blvd
Second Floor
Cleveland, OH  44122

Marvel Consultants
Frank Cirino, Jr., CISSP
Practice Leader-Security/Risk
fcirino@marvelconsultants.com



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.securityfocus.com/jobs

<Prev in Thread] Current Thread [Next in Thread>
  • [SJ-JOB] Manager, Information Security, Cleveland, fcirino <=