Job Description :
Information Security Engineer
Contract to Hire
Location: Phoenix, AZ
Description:
Our Client is seeking to fill the position of Sr Information Security Engineer. This position will assist with managing the security compliance programs that helps protect the State from cyber threats and will assist with compliance of State agencies'' security operations, security architectures/strategies, and security planning functions. This position requires a high-level of personal integrity, as well as the ability to professionally handle confidential matters, and show an appropriate level of judgment and maturity. Position requires a high degree of initiative, dependability and ability to work with little supervision. This position will be responsible for identifying, evaluating, and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the enterprise.
KNOWLEDGE, SKILLS & ABILITIES:
Successful candidate will possess a Bachelor''s degree and 8 years of extensive technical experience in Information Security Systems (or equivalent experience Professional certifications in Information Security and Networking Systems (hardware and software) are highly desirable, as well as an in-depth knowledge and understanding of specific information protection standards (NIST, HIPAA, PCI, IRS, etc. as appropriate The candidate must have expertise to understand the State''s technical and business environment, Statewide Information Security policies, along with State statutes regarding privacy and security compliance. The candidate must have expertise to understand external threats to an organization, the monitoring and dissemination of those threats to agencies, as well as the ability and guidance to help respond and mitigate those threats. The ideal candidate is an experienced leader, a consensus builder, and an integrator of people and processes. The candidate must have strong written and verbal communication and presentation skills including the ability to communicate to State executive management, translating regulatory and technical issues/solutions into business terms as well as explain and defend the security posture, actions, and strategies. The candidate must have proven ability to serve as a senior member of a team and can form, manage, and lead advisory committees. They must also interact effectively with data managers, auditors, consultants, vendors, and stakeholders.
Highly desire candidate with skills in the following: situational leadership; decision making with the ability to communicate to various audiences; collaboration and group facilitations; strong project management; security compliance and auditing; network administration skills; familiarity with contract and business analysis; risk management methodologies; incident response and crisis management.
ESSENTIAL TASKS:
Day-to-day operational support of the hardware and software solutions that protect State of Arizona systems and networks from attacks. Secures against statewide data loss by leveraging a variety of enterprise information security systems and controls.
Ensures compliance with Statewide Information Security policies, NIST, FIPS, ISO, HIPAA and other organizational standard requirements to prevent data loss and/or data ex-filtration.
Performs and may lead in-depth information security forensics, assessments and assists with formal information security investigations. Participates and responds to external security audits and security assessments.
Participates in enterprise projects by evaluating infrastructure and applications as they relate to information security architecture, directives and policies. Participates with defining enterprise security policies and standards.
Responds promptly to any state agency''s requests for assistance while maintaining adherence to organization''s SLA goal of customer service excellence to exceed customer expectations.
Continually assisting agencies to identify information security and privacy protection risks in each budget unit and assists agencies to adopt risk mitigation strategies, methods, and procedures to lessen these risks for the State; other duties as assigned.