Job Responsibilities

• Managing and performing technology control assessments in a wide variety of business environments, including:
1. Payment Card Industry (PCI) Data Security Standard (DSS) Compliance
2. Information Technology Operational and Cyber Security Assessments in accordance with industry frameworks
3. Cloud Security Compliance
• Assisting end users with the performance of Business Impact Analyses (BIAs) along with development of business continuity and disaster recovery plans (BCPs and DRPs)
• Participates in data classification efforts
• Participates in developing information technology and security policies and procedures
• Providing trusted advisory services and guidance to stakeholders that will reduce organizational risk and improve their overall security posture
• Preparing and reviewing reports and other deliverables that contain strategy, technical analysis, and findings in connection with Cybersecurity advisory and assessment engagements and communicating those results to management
• Managing staff in the completion of engagements on time with limited necessary revision
• Maintaining an up-to-date technical acumen
• Leading client meetings and presenting at networking events (e.g. (ISC)2, ISACA, IAPP)
• Assisting in the growth of the team by identification of resources

Job Requirements

Education & Certification
• Degree in an Information Technology or Cyber Security

Experience
• Minimum 3 years of relevant experience and 1 year of management experience or minimum 6 years of relevant experience with 2 years of management experience

Other Prerequisites
• Understanding of or experience with industry and regulatory standards, including PCI, ISO 27000 series, and information security requirements of Generally Accepted Privacy Principles (GAPP)
• Working knowledge of network, system, database, and application-level security
• Advanced written and verbal communication skills
• Strong interpersonal skills and the ability to foster close professional relationships with business and Information Technology
• Strong project management skills and the ability to manage multiple projects and teams in parallel
• Strong analytical skills and the ability to understand complex client business processes
• An understanding of the importance of business ethics
• Qualities such as professionalism, attention to detail, strong organizational skills, team-focus, dedication, resourcefulness, and an eagerness to learn
• Strong proficiency with Microsoft Windows, Mac OS X, and the Microsoft Office suite of products, (i.e. Word, Excel, Visio, PowerPoint)
• Working knowledge of IT governance, operations, and resource planning
• Working knowledge of Information system architecture and security controls, including:
1. Firewalls and routers
2. Intrusion detection and prevention systems
3. Operating systems (e.g., Windows, Linux, Unix, iSeries)
4. Remote access systems
5. Applications
6. Databases (e.g., SQL, Oracle, DB2)
• Familiar with Systems Development Life Cycle (SDLC) and change management
• Familiar with Information system implementation processes
• Working knowledge of Systems administration and computer operations
• Experience in threat and vulnerability management
• Experience in Incident response preparation and management
• Working knowledge of Data backup and recovery practices
• Working knowledge of Logical access controls (e.g., Active Directory)
• Working knowledge of Physical and environmental security controls