Information Security Officer

Infojini Consulting is a full service IT consulting, services, and staffing firm with offices in Secaucus, NJ.
Infojini
Consulting is recognized as one of the fastest growing IT services and
software development Companies. With a partnership of all major
technology vendors, Infojini Consulting has built a strong Government
and commercial customer base including fortune 100 companies and most
state and federal agencies such as State of North Carolina, State of
South Carolina, State of Maryland, State of California, State of
Pennsylvania, State of Virginia, State of Washington and many others.
Infojini
Consulting is an equal opportunity employer and considers all qualified
individuals for employment irrespective of their race, gender, age,
color, sexual orientation. We offer an excellent compensation package

Perform a detailed security assessment and establish the current baseline.

Create an information security improvement plan and implement the plan by closely collaborating with other internal IT teams.

Create and maintain information security score card.

Establish Information Security and Risk Management programs. Some of the responsibilities include developing, implementing and maintaining DES information security enterprise standards, processes, procedures, regulations, and guidelines based on federal and state laws and mandates (e.g. NIST 800-53, IRS Publication 1075, FedRAMP, etc.).

Conducts system configuration and operations audits of discrete applications, network, and computing resources to identify potential vulnerabilities (e.g. Port Scans, Intrusion Detection and Prevention, Network Scans and Perimeter Security).

Provides leadership and guidance in information security and enterprise risks to business owners and agency staff.

Required Skills:

Demonstrated work experience developing and implementing Information Security and Enterprise Risk management programs.

Experience developing, implementing and maintaining information security standards, processes, procedures, regulations, & guidelines

Experience developing and implementing security improvement plans with effective results that are tracked and reported

Experience configuring, implementing and managing all the various information security solutions

Knowledge of the latest cyber security frameworks, principles, application threats/vulnerabilities, and secure coding practices

Knowledge of cloud security best practices in the areas of Services, Infrastructure (IaaS), Platform (PaaS), and/or Software (SaaS).

Desired

Skills:



Experience in the areas of NIST Risk Management Framework, IRS Publication 1075, Fed Ramp, Cloud Hosting, and FIPS

Experience in the areas of Siem and Identity Management (IDM) solution implementations

Ability to work with IT staff to transition knowledge as requested

One or more of the following certifications (current) CISSP, CISM, CISO, CEH, GIAC/SANS certified tracks, etc.

Bachelor's degree in Computer Science/Engineering or equivalent with at least five years of progressive experience in the Security field

All your information will be kept confidential according to EEO guidelines.