Info Security Consultant

Responsibilities

• Provides corporate security consulting support to concurrent projects or security requests (average 25-30)
• Acts as an owner for assigned work
• Maintains adequate documentation regarding decisions and work performed
• Escalates problems in a timely manner
• Documents processes, procedures, and best practices
• Assists in the development of team metrics, analyzes data, and takes appropriate action
• Maintains knowledge currency of security and related risk based areas and methods
• Independently identifies and analyzes security risks/vulnerabilities, communicates risks to appropriate parties across the organization, and ensures risk mitigation to enable risk-based business decision making
• Anticipates and addresses security needs/issues
• Provides security guidance and makes reliable security decisions with minimal supervision
• Interprets security policy and standards and consults on security variance requests
• Interprets policy and decisions variance requests
• Creates and executes risk review/consulting assessments
• Translates information security terminology into terms understandable to diverse groups
• Establishing and sustaining collaborative relationships:
• Partners and collaborates with Client Corp business and technology groups to deliver value through security review, assessment and consulting services
• Interfaces with corporate technology and line of business areas
• May interface with internal and external audit partners
• Builds and sustains collaborative relationships with multiple constituencies
• Solid presentation development; thoughtful organization of content; takes audience into account; solid writing skills;
• can cohesively present and organize information in support of conclusions/findings; identifies and fills gaps in documentation.
• Strong security, networking, risk management, and technical skills; solid and demonstrable comprehension of security including tools, controls, policies, threats and attacks.
• Understanding of security and technology strategies, related security controls and processes, and general business/financial knowledge.
• Identifies and analyzes security risks, communicates risks to appropriate parties and ensures mitigation to enable risk based business decision making.

• Bachelor degree or equivalent work experience
• Five to seven + years of security experience including technology-related auditing, consulting, and/or operational banking experience
• Subject matter expert level expertise knowledge of both the business and technical aspects of security, including third party security risks.
• Strong broad-based technical background (distributed/mainframe, database, web based application development)
• High level of business acumen, preferably in a regulated/financial industry
• Experience in a governance organization
• Strong risk-based analysis and decision making skills
• Ability to understand and analyze complex business processes and technologies to make sound recommendations
• Project management experience
• Ability to multitask and manage competing priorities
• Process management, time management and organizational skills
• Excellent interpersonal, customer service and relationship management skills
• Excellent facilitation, negotiation and conflict management skills
• Proven ability to effectively handle challenging clients and difficult political situations
• Excellent written and verbal communication skills
• Ability to create and implement new processes and procedures
• Proficient use of personal computers and Microsoft Office Suite

• Excellent growth and advancement opportunities

As an equal opportunity employer, ICONMA provides an employment environment that supports and encourages the abilities of all persons without regard to race, color, religion, gender, sexual orientation, gender identity or express, ethnicity, national origin, age, disability status, political affiliation, genetics, marital status, protected veteran status, or any other characteristic protected by federal, state, or local laws.

ICONMA