Job expirat
- Responsible for applying and supporting systems security processes, policies and tools.
- perform security risk assessment and recommend measures to deal with identified risks across many differing aspects of IT infrastructure.
- Maintaining the Security and Compliance infrastructure including Enterprise Security Manager (ESM), Tripwire, network IDS and Sharepoint sites.
- Reviewing proposed additions or changes to infrastructure that impact security or compliance.
- Advising & supporting management on Compliance and Security issues.
- Assisting with ensuring that CIO as a reporting entity meets appropriate security standards in line with requirements set out by Sarbanes Oxley Legislation.
- Assisting in remedial action taken as a result of failures from a security or governance perspective
- Providing guidance and support to Affiliates on IT security or governance related topics, where necessary.
- Producing monthly & quarterly progress/ status reports.
- Assisting with incident management and investigation.
- Liaising with external vendors to ensure products meet baseline security requirements as defined by policy.
- The ideal candidate will come from a “hands on” security background.
- Demonstrated knowledge of security principles, risk assessment, products and architecture in distributed computing environments, core platforms, and network technologies in a global infrastructure
- The candidate should have strong business awareness, IT security awareness and leadership skills, together with the ability to write about complex Information Security subjects for a non-expert IT audience.
- Three years solid experience in a role of this type
- Extensive understanding of Information security management best practices, including knowledge of policies and standards (ISO27001 and BS7799)
- An in depth knowledge of network security management technologies including firewalls, Cisco, Databases, Unix, Windows and middleware.
Servicii de Resurse Umane si consultanta in management.
