IT Security Process ConsultantPosted: November 16, 2009
Reference # : 09-02776 Title : IT Security Process Consultant Location : New York, NY Experience Level : Start Date : Fri, Sep 25, 2009 Position Type : Contract Description Global Financial Institution located in has an immediate opening for a SMA- Security Process Team Consultant. Experience: 5-10 Education: Bachelors Degree Job Description: This role on the Security Process Team (SPT), involves interactions with Business Units, Information Security, and Information Technology to put process and ownership around Firm resources. The primary drivers of the team are to identify and document data/ resources, classify data sensitivity, and define data/ resource ownership. Initial scope is the ISG mainframe, but will likely expand into the distributed platform and beyond ISG. The candidate will work within the IT Security group and Information Security Office. Interactions will primarily be with members of the Business Units (including senior officers), as well as all other team members in the Security Management and Administration Team. Duties and responsibilities will include but are not limited to the following: ? Define security policies and best practices related to: o procedures to request, approve and provision access data o administering resources that are shared between more than one Business Unit o timeframes to remove entitlements for non-use and suspend ACIDs for inactivity o responsibilities of a resource owner as it relates to maintaining current documentation on their resources, approving access requests, reviewing entitlements to their resources, etc. ? Develop methodology to: o collect and analyze security data o engage Business Units o remodel security profiles such that they are adequately restrictive o periodically revalidate resource and ownership data and update as necessary ? Determine tools necessary for collecting, formatting, and centrally documenting Business Units information ? Analyze BU data and resources and define a preferred model for individual Business Units that adheres to the Security Management and Administration Teams guiding principles ? Coordinate directly with individual Business Units to: o Identify their mnemonics and resources o Collect and review data related to the resources for the Business Unit o Liaise with IT and BUs to understand their resources and how they are intended to be used o Identify contacts that are empowered to make security related decisions on behalf of the Business Unit o Assign appropriate owners to their resources and assist in data classification efforts o Recommend a security approach that offers appropriate level of control for that Business Unit and obtain Business Unit signoff o Restructure security profiles such that they appropriately restrict access o Document Business Units security model, approach, resources, etc. ? Coordinate with Security Management team to review security proposals and assess technical feasibility ? Develop security administration procedures for Security Administration team to follow and enforce ? Produce metrics and reporting to track progress ? Monitor progress against project plan Skills Required: ? College graduate with at least 7 years related experience (Risk Management, Information Security, Technology, Audit, Security Administration, etc.) ? Excellent verbal and written communication skills ? Strong business background in Financial Services ? Understanding of security concepts and technologies ? Capable of working independently with limited oversight ? Good research skills ? Analytical mindset with attention to detail and accuracy ? Good project planning and time management skills ? MS Office business application experience (Excel, Word, Access, Powerpoint) ? Ability to multi-task ? Must be a team player and foster a team first environment and culture ? Motivated self started with passion for learning ? Goal oriented Skills Desired: ? Experience with mainframe security software such as CA-Top Secret or RACF ? Experience with distributed security ? Experience with database technology such as Sybase ? Front office experience in a Business Unit Skill Proficiency: Senior
Please refer to job code infotech-562332 when responding to this ad.
| Category: | Trades |
| | | Location: | New York, NY | | County: | New York County | | ZIP Code: | 10001 | | Pay Rate: | Open | | Job Terms: | full time | | Company: | Info Technologies, Inc. | | Phone: | email only please | | Fax: | email only please |
|