Primary Duties and Responsibilities:
- Lead the development and execution of risk assessment methodologies to address business, regulatory, and technical environment considerations.
- Oversee the development of requirements, system architecture, and software design for security products and services.
- Develop strategies for the discovery, evaluation, and response to new networking attacks.
- Create security incident response plans and strategies.
- Provide trouble resolution and act as the point of technical escalation for complex problems.
- Prepare presentations and seek IT management approval for significant replacements or reconfigurations of major security systems serving the enterprise.
- Set vendor strategy and direction.
- Participate in project teams, providing technical consultation to business partners and developers.
- Design and engineer comprehensive access management and network security solutions based on business requirements and technology standards.
- Collaborate with the architecture team to update technology direction and strategy.
- Develop reports supporting strategy and direction for management.
- Serve as a technical lead in merger and acquisition activities.
- Act as a subject matter expert to peers, management, and senior leadership.
Skills and Qualifications:
- Ability to provide top-tier support in at least 5 of the following information security areas:
- Access Control
- Application Security
- Business Continuity and Disaster Recovery Planning
- Cryptography
- Information Security and Risk Management
- Legal, Regulations, Compliance, and Investigations
- Operations Security
- Physical (Environmental) Security
- Security Architecture and Design
- Telecommunications and Network Security
Educational Requirements:
- BS/BA in a related field, or equivalent combination of education and experience.
Experience Requirements:
- 8+ years of experience in systems administration and the security aspects of information systems, computer networking, telecommunications, systems development, and management.
- Significant experience across multiple technical and business disciplines.
- Advanced knowledge of data processing controls and access management and network security technologies.
Certifications:
- Security Certifications such as CISSP and other advanced technical security certifications (e.g., Information Systems Security Architecture Professional, Information Security Engineering Professional, or equivalent) are preferred.
Preferred Qualifications:
- Previous experience as a federal contracting system security officer is highly desirable.