SUMMARY: Analyzes information security systems and applications and recommends and develops security measures to protect information against unauthorized modification or loss. Requires a bachelor's degree with at least 5 years of experience in the field. Familiar with a variety of the field's concepts, practices, and procedures. Relies on extensive experience and judgment to plan and accomplish goals. Performs a variety of tasks. A wide degree of creativity and latitude is expected.
ESSENTIAL FUNCTIONS
- Develops and maintains Information System security policies.
- Establishes disaster recovery and business continuity plans.
- Audits system access logs.
- Performs regular security reviews, risk assessments, and audits both internally and for third party vendors.
- Collaborates with software development teams to design secure software systems.
- Creates and communicates Information Security training.
- Interacts with employees to resolve Information Security items.
- Assists with the inventory management of software and hardware.
- Promotes responsible usage and care of corporate equipment.
QUALIFICATIONS REQUIRED
- Effective communicator.
- Ability to analyze, organize, prioritize, implement, and control business activities and transactions.
- CISSP, CISM and CISA certifications are highly desirable for this role.
- A thorough understanding of PCI-DSS, HIPAA and Data Protection legislation.
- In depth knowledge and understanding of the ISO 27001 and ITIL frameworks is also beneficial.
MINIMUM REQUIRED EDUCATION/TRAINING
- Bachelor's degree and at least 5 years of experience in the field or in a related area.