Senior Security Architect Pre sales

Job descriptionThe Senior Security Consultant is a security expert. The candidate will a lead security engagements b perform the engagement on their own or lead a team c develop new and existing business d respond to Request For Proposal’s e create security solutions fbe seen by the customer as the trusted advisor and security expert g drive growth from the existing engagement.In this role you are one of the foremost experts in Governance Risk and Compliance andor SOC consulting. For Governance Risk and Compliance you are deep and an expert in creating ISMS using various standards such as ISO. You are deep in developing a risk management framework and have previously created them for multiple organizations You were the lead or expert senior consultant in multiple Governance Risk and Compliance and risk management engagements. You have also conducted multiple risk assessment and have used multiple risk assessment standards. Ideally you are also familiar with the ISF’s methods andor other bodies. Additionally you can demonstrate the risk management frameworks organizations ISMS and other related Governance Risk and Compliance you have created and led.For SOC you would have previously built multiple SOC’s. Meaning you would have done more then just implemented a Security Information And Event Management you would have created the procedures and manuals required for incident problem change threat response forensics shift management and all other nontechnical areas within the SOC. This role is for a senior security consultant who is deep and an expert in Governance Risk and Compliance Risk Management and SOC.Is passionate about IT security and comes from very strong handson IT networking and heterogeneous computing background network routingswitching UNIX Windows LINUX VM. With an extensive IT and security background you also have a security technical testing hacking background and are an expert in various threats and threat modeling. The individual is expected to drive demonstrate IT Security leadership and d be able to interface with various levels of IBM and customers. This includes VP’s CISO’s and CIOs.Responsibilities •Lead security engagements and business development•Provide solutions leadership and ownership to continuously improve security and reduce risk exposures.•Develop Risk Management programs that substantiate investments and reduce risk.•Create Governance Risk and Compliance solutions including ISMS•Develop conceptual logical and physical security models as appropriate.•Design security controls and countermeasures that meet the requirements of the business audit as well as the information security policies. •Lead and guide complex IT security problems and incidents such as attacks breaches malware APT’s. Design and implement countermeasures andor compensating controls•Analyze monthly security metrics and work with account security delivery areas to present solutions and analysis to customers•Create solutions that meet compliance and audit requirements PCI SOX others. •Create SOC processes and designs incident problem change threat response so on. Design process flows which can be automated by technology such as tickiting systems and SIEMs.Experience•Grown up through the security ranks prior experience in penetration testing.•Extensive experience in implementing information security solutions such as firewalls identity and access control IPSIDS and host based solutions cryptography solutions CA’s key management systems URL filtering email security and endpoint protection solutions such as anti malwarefirewalls RequiredBachelor's Degree At least 8 years experience in knowledge of general information security concepts issues and the industry. At least 4 years experience in Performing multiple risk assessments At least 5 years experience in Defining security architecture artifacts for enterprise solutions including technical design and methodology definition At least 10 years experience in Information Security experience At least 8 years experience in Creating and managing risk management programs English Fluent Additional information•Experience with application and infrastructure hardening techniques.•Experienced in IT networking and heterogeneous computing environments network routingswitching UNIX Windows LINUX VM. •A deep understanding of threat risk analysis concepts.•Experience performing information security risk assessments.•Experience in IT security related audits such as PCI DSS SOX SAS70 5970 ISO 27002 or others.•Certified Information Systems Security Professional Certified Information Security Manager Certified Information Systems Auditor and other security industry certifications IBM is committed to creating a diverse environment and is proud to be an equal opportunity employer. All quali more...

LI

via http://ift.tt/1djgM4T

شارك هذه الصفحة وتابعنا على صفحاتنا الرسمية

شارك الموضوع →

تويت

تابعنا →

إنشر الموضوع →