Job Description :
Position: Senior Security Solutions Consultant
Location: Wilmington, DE
Duration: Contract
Job Description:
Position Summary:
This role will be responsible to ensure new solutions developed or purchased are implemented according to all security controls requirements. The individual is expected to deliver concise security requirements, review project designs against security requirements, and ensure security controls are operating effectively prior to project closure. This role is expected to provide strategy and execution components that support corporate direction, regulatory compliance and security best practices. Management Reporting through well-defined metrics is required on a regular basis. This individual must have a high degree of business acumen and be able to articulate and defend security position to technical project teams and to Management. This individual must stay current on technology trends, directions, and best practices as they relate to IT security.
Essential Functions:
Experience and knowledge in a corporate environment with the following;
1. Provide clear and concise security requirements that meet corporate direction, regulatory requirements and security best practices
2. Review project solutions designs to ensure security requirements are met in both SDLC and Agile formats.
3. Implement security solutions, and provide technical leadership during the design, development, and testing phases of major initiatives.
4. Ensure security controls are implemented and operating effectively as part of solutions delivery
5. Be able to articulate and defend security positions
6. Research, formulate and present detailed security positions relative to new technologies to Senior Information Security Leaders
7. Cost benefit analysis techniques in assessing options for mitigating risks threats and exposures to acceptable levels
8. Managing and reporting status of identified risks
Other Responsibilities:
1. Performs other work related duties as assigned
2. Willingness to be included in 24x7 on-call rotation
Knowledge, Skills, Education, Experience, and Competencies:
1. 4 year college degree in a technical discipline and 10 year equivalent practical experience;
2. Applicable industry recognized security or technical certifications
3. Must be able to drive security and create and defend security position within project teams
4. Must be able to communicate effectively orally and written to Executive Management
5. Demonstrated analysis, planning, design, engineering and implementation experience of appropriate security controls within solutions delivery
6. Ability to design and review network designs for perimeter and internal environments
7. Detailed knowledge of:
8. firewalls, network routing, Internet Security and Virtual Private Networking
9. cryptographic systems and algorithms, key management and practices
10. infrastructure security including Windows/Linux/Unix systems, Oracle and SQL databases
11. operational security including access controls, data privacy, monitoring and logging and availability requirements that meet corporate Business Continuity strategies
12. Knowledge of regulatory requirements, security standards and compliance issues (FFIEC guidelines, Sarbanes Oxley, GLBA, ISO 27001, CobiT v4.0, and Payment Card Industry Data Security Standard (PCI DSS.
13. Experience with root cause analysis, risk mitigation, security assessments, analysis of security threats, trends and architecture preferred.
14. In addition to security, proficient in other IT control areas (i.e., change management, SDLC, and Agile Operations
15. Strong project management (and time management) skills required. Ability to work on numerous projects/activities simultaneously. Ability to communicate effectively in a project environment and articulate/defend security positions.
16. Proven interpersonal skills and ability to take a leadership role. The ability to communicate with management and peers to build and sustain cohesive relationships.
17. Superior attention to details.
18. Able to work well with and communicate effectively with all levels with the IT Organization.
19. Able to quickly grasp the big picture, yet remained focused on coordinating tasks at the detailed level
20. Industry security certifications preferred (CISSP, CISM, CISA, CEH etc)