Security Manager (Due 8​/17

Security Manager Consultant

Manages the development and delivery of IT security standards, best practices, architecture, and systems to ensure information system security across the enterprise.

Implements processes and methods for auditing and addressing non-compliance to information security standards; facilitates migration of non-compliant environments to compliant environments.

Conducts studies within and outside the organization to ensure compliance with standards and currency with industry security norms.

Manages and participates in the planning and implementation of security administration for all IT projects.

Responsible for evaluation and selection of security applications and systems.

Makes recommendations and assists in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures.

Candidates need to be well-versed in security architecture so that they understand how technologies, principles, and processes align to NIST framework for the development of appropriate controls for a System Security Plan. They will work with through the Information Security Management agency, who will facilitate people and project management. The team size is anticipated to be approximately up to 5 at any given time.

The candidate will mostly work with Information Security Management, security team members, and business application development supervisors. Security Tools Used include Splunk, Trellix, Rapid7, and the Microsoft E5 Security toolset. Bachelor’s Degree in Computer Science, Information Systems or other related field or five (5) years equivalent work experience.

A minimum of seven (7) years of IT work experience with a broad range of exposure to all aspects of business planning, systems analysis and applications development. Experience with managing team(s) and project(s) for information security management.

Experience managing the development and delivery of IT security standards, best practices, architecture and systems to ensure information system security across the enterprise.

Experience implementing processes and methods for auditing and addressing non-compliance to information security standards; facilitates migration of non-compliant environments to compliant environments.

Experience conducting studies within and outside the organization to ensure compliance with standards and currency with industry security norms.

Experience managing and participating in the planning and implementation of security administration for all IT projects.

Experience being responsible for evaluation and selection of security applications and systems.

Experience making recommendations and assisting in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures.