Responsibilities and Deliverables:

- Develops the Information Security vulnerability management program.
- Documents information security policies and procedures for the organization in accordance with regulatory requirements.
- Monitors compliance with the Company's information security policies and procedures among employees, contractors, partners and other third parties, and refers problems to appropriate department management.
- Develops the Information Security Metrics and Event Management Program.
- Monitors security devices to ensure appropriate information access levels and security clearances are maintained.
- Identifies potential threats and responds to reported security violations. Determines causes of security violations; recommends and implements corrective actions to ensure data security.
- Performs regular information security risk assessments for information security processes.
- Monitors advancements in information security technologies and best practices, changes in legislation, and changes in accreditation standards that affect information security.
- Works on highly complex tasks or project assignments to analyze, design, develop, implement, document and maintain security systems and solutions.
- Provides technical assistance and problem resolution for a wide range of complex security issues.
- Coordinates completion of complex work assignments for a project team.
- Acts as a source for direction, training and guidance for peers.
- Participates in on-call rotation which requires 24/7 support while on-call.

QUALIFICATIONS:

• B.Sc. in Comp. Sci, Engineering or related training and experience.
• 5+ years managing security devices.
• 3+ years experience developing and maintaining a security metrics program.
• 3+ years experience developing and maintaining a vulnerability management program.
• Strong understanding of network designs and network protocols
• Familiarity with other IT areas (web services, databases, etc.)
• Relevant security certification, such as, CISA, CHSP, CISM, CISSP, MCSE etc
• Ability to apply Information Technology Infrastructure • Library (ITIL) standards and processes to security metrics program.
• Strong understanding utilizing ISO 27001 as a Security • Management System.
• Ability to lead incident response and investigations of security policy violations.
• Knowledge of iSeries, AIX, UNIX, LINUX, Windows and Macintosh operating systems, and others as introduced.

Apply Directly to this Company

To apply for this position, apply directly through the company's website at REI Employment Opportunities.

***This company prefers that all applicants come directly through their website. DO NOT apply by clicking the "Send My Profile" button above. Use the website link listed directly above to apply for this position.***