Sr Analyst, Info Security Mgmt (DR, IT Audit & Compliance)

Position Description:

Manages both technical and business issues of disaster recovery ensuring necessary policies, processes, testing and procedures are in place.
- Ensures the overall disaster recovery vision set by Information Security Council is attained by the enterprise and Business Units.
- Manages Disaster Recovery at both the technical and process level.
- Oversees all technical and communication aspects of disaster recovery contracts.
- Directs all technical and communication aspects of disaster recovery exercises and events.
- Manages IT audit oversight ensuring audits are successful and audit issues are remediated by due dates
- Ensures security compliance to Information Security Framework policies and standards.

Responsibilities:
- Actively participates in contributing and carrying out disaster recovery and security policies and practices, including disaster recovery tests, IT audit coordination, and security compliance initiatives.
- Provides oversight and lead efforts to comply and maintain enterprise disaster recovery and security standards and practices.
- Provides ad hoc information and assistance to projects and Business Units, as applicable.
- Project manages initiatives to support the strategy and plans.
- Assist with RFP's, RFI's, and projects.

Position Attributes:

EOE M/F/D/V

Business Unit:

0CCIA - Carlson Companies, Inc.

Position Requirements:

Requirements/Qualifications:
- Bachelor Degree, with a technology or business emphasis, or equivalent education/experience.
- Certifications: CBCP required; MBCP preferred (or equivalent).
- Certifications: CISSP, CISA, or CISM required.
- Project Management Institute (PMI) and ITIL certifications desired.
- Experience in IT with 5 or more years of security and/or IT audit expertise.
- 3-5 years of previous disaster recovery contract management with hot-site providers
- Successfully conducted previous Disaster Recovery Exercises, including multi-vendor recovery scenarios.
- 2-3 years of using Paragon, documentation of recovery plans and testing scenarios.
- Previous experience with outsourced, and international, operations.