SMD2020-3954-Senior Information Security Officer

Company: Careerbuilder-US
Location: Baltimore
Posted on: January 13, 2021

Job Description:

Candidate must be Authorized to work in the United States with any employer, No Visa Sponsorship, No C2C candidates please, No Third Party agencies. This is a direct hire role. Job Title: SMD2020-3954 - Senior Information Security Officer Location: Baltimore, MD Duration: Long Term Responsibilities: -- Managing Legacy and Cloud solutions to security strategy, governance and compliance, infrastructure hosting and business processes, requirements gathering, project management, security audits, policies and managing multi-agency relationships. -- Create strategic vision, governance and compliance by providing technical input and documentation support in NIST, FISMA and RMA security policies and procedures to generate Authority to Operate (ATO) for AWS platform, data and applications. -- Manage security controls to provide best practices in encryption of PII and FTI data at rest and in transit to support legislative, IRS and other Federal audits. -- Provide application development security support including SSL Certificates, vunerability scanning, penetration testing, database/disk encryption and application scripting security using Privileged Access Management (PAM). Use of firewalls, IPS, VPN and MFA (Multi Factor Authentication). -- Authorize and manage hosting vendor relating to program objectives, change management, incident management, root cause analysis and consultant hiring. Qualifications: * B.S. degree, preferably in IT) plus 5 years of IT Security related experience * Expert knowledge of information security engineering, design concepts and principles. * At least 2 years of experience in Cloud Security (preferably AWS) * Minimum of 15 years' experience in IT. At least 5 years' experience in many of the following areas: * Security Architect/design, planning and deployment * Vulnerability management * VPS, IPS, URL/content filtering, emails security, encryption, SIEM, WAF * Windows, Linux OS * Server hardening/security baseline standards * PKI/certificate management * Security Operations, Incident Response * NIST, FISMA and RMA security policies and procedures * Identity and Access Management (MFA, SSO) * Software development and secure development * Threat modelling * Team leadership and management * Security audit and compliance * Project/program management * Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences. * Strong business and technical background in Fortune 500 and/or business consulting experience. * Deep understanding of cybersecurity and the relationship between threat, vulnerability and information value in the context of risk management. * Strong proficiency with common cybersecurity management frameworks, regulatory requirements and industry leading practices * Ability to handle stress and work well under pressure, A Critical Thinking Skills, Interpersonal and People Skills, Listening Skills, Multi-tasking Ability, Oral and Written Communication Skills * Industry certifications, such as CISSP, CISA, CAP, Security+ certifications are preferred. * Exceptional interpersonal and verbal communication skills, with the ability to collaborate well across teams and organizations. * Leadership experience desired. * Proven ability to multi-task and deliver on-time with the highest quality Candidate must be Authorized to work in the United States with any employer, No Visa Sponsorship, No C2C candidates please, No Third Party agencies. This is a direct hire role. Job Requirements:* * B.S. degree, preferably in IT) plus 5 years of IT Security related experience* Expert knowledge of information security engineering, design concepts and principles.* At least 2 years of experience in Cloud Security (preferably AWS)* Minimum of 15 years' experience in IT. At least 5 years' experience in many of the following areas:* Security Architect/design, planning and deployment* Vulnerability management* VPS, IPS, URL/content filtering, emails security, encryption, SIEM, WAF* Windows, Linux OS* Server hardening/security baseline standards* PKI/certificate management* Security Operations, Incident Response* NIST, FISMA and RMA security policies and procedures* Identity and Access Management (MFA, SSO)* Software development and secure development* Threat modelling* Team leadership and management* Security audit and compliance* Project/program management* Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.* Strong business and technical background in Fortune 500 and/or business consulting experience.* Deep understanding of cybersecurity and the relationship between threat, vulnerability and information value in the context of risk management.* Strong proficiency with common cybersecurity management frameworks, regulatory requirements and industry leading practices* Ability to handle stress and work well under pressure, A Critical Thinking Skills, Interpersonal and People Skills, Listening Skills, Multi-tasking Ability, Oral and Written Communication Skills* Industry certifications, such as CISSP, CISA, CAP, Security+ certifications are preferred.* Exceptional interpersonal and verbal communication skills, with the ability to collaborate well across teams and organizations.* Leadership experience desired.* Proven ability to multi-task and deliver on-time with the highest quality

Keywords: Careerbuilder-US, Baltimore , SMD2020-3954-Senior Information Security Officer, Other , Baltimore, Maryland