Job Description:
This role will be responsible for analyzing, evaluating, and rewriting information security policies. The analyst must have an extensive experience with both information security and network security policies, development, and support. The analyst must have security and writing expertise in developing complex security policies and procedures, ISO/ 27000, ISO 28000, NIST Security Frameworks, and have a security certification such as CISSP.
EXPERIENCE AND EDUCATION:- 5-7 years of experience in security/infrastructure protection and information security auditing
- Solid multi-platform knowledge
- Experience in UNIX, Windows, Linux, networking, and IP intranet/Internet security environments including
- Experience with RSA SecurID infrastructure, Vulnerability scanning, and Fortinet Firewall implementations
- Certified Information Systems Security Professional (CISSP);Solid knowledge of security, network policies and procedures, and experience in compliance matters
- Experience linking legal and regulatory statutes with corporate policies
- Excellent communication skills
- Experience with risk analysis
- One or more relevant industry or vendor certifications are highly desirable
- Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) SANS-GIAC certifications System Security Certified Practitioner (SSCP) Certified Protection Professional (CPP) Certified Network Security Professional (CNSP)