Director- Information Technology Security Consulting Services

CNM LLP; Los Angeles (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

CNM LLP is seeking a Director of Information Technology Security Consulting Services to lead and manage IT security projects. This role involves overseeing project teams to enhance security measures for a range of clients, from emerging entities to large corporations in Los Angeles.

The ideal candidate will have at least 8 years of experience in information security systems, a strong grasp of regulatory compliance, and proven project management skills. Opportunities for leadership growth are available.

Qualifications

• 8+ years of experience in developing and implementing information security systems.
• Strong understanding of regulatory compliance.
• Experience in project management for information security projects.

Responsibilities

• Manage IT Security projects and oversee project teams.
• Negotiate project scope, budgets, and maintain client relationships.
• Design and implement security strategies and governance frameworks.

Skills

Information security systems development

Regulatory requirements knowledge

Vulnerability assessments

Project management

Networking concepts (TCP/IP, OSI)

Programming/scripting languages (C, Java, Perl, Shell)

Education

Bachelor's degree in a relevant field

Job description

Director - Information Technology Security Consulting Services

• Full-time

CNM LLP is a specialized boutique accounting and consulting services firm looking for an Information Technology (IT) Security Consulting Services Director to help double the size of our firm in three years. As a result, you will have the opportunity to grow your career in a collaborative environment that is a playground for highly skilled, self-motivated professionals. You will oversee several concurrent project teams to review and assess the IT environments, risks, and controls related to information confidentiality, integrity, and availability for companies that range from newly public high‑growth entities in rapidly changing environments to the largest entertainment and public companies in Los Angeles.

First year challenge

• Manage Information Technology (IT) Security projects involving strategy, implementation, support, and software/hardware optimization related to security, privacy, and business resilience
• Review and redesign security profiles to assess and improve how application security is being used as part of the overall control environment
• Provide guidance and advise project teams in developing and enhancing IT security controls and resolving identified deficiencies within the IT department of our clients; recommend IT solutions that balance client resource constraints with risk mitigation.
• Oversee successful project completion by prioritizing manager and senior tasks
• Negotiate scope of work, bill rates, and budgets for recurring projects at existing clients
• Maintain and build client relationships
• Security strategy: assess, design and implement a security strategy and governance program framework that describes the process, controls, organization and infrastructure to manage information security concerns
• Security implementation: design, implement and integrate security solutions to address enterprise risks and exposures
• Security governance: design and implement security policies, procedures, and standards that describe pragmatic, risk‑based mechanisms to maintain confidentiality, integrity, and availability of information systems and data
• Security monitoring: design and implement security solutions to monitor efficiency and effectiveness of security operations, controls, and infrastructure

Promotion to Practice Leader

Upon successfully demonstrating the skill set listed above you will have the opportunity to earn a promotion to Practice Leader. As a Practice Leader you will be responsible for:

• Practice development with assigned existing clients
• Assisting the partnership group in managing one of the administrative functions of the overall firm which includes Human Resources, IT, Accounting, Scheduling and Recruiting
• Hands‑on knowledge of ISO27001, PCI-DSS, COBIT and Privacy Regulation requirements

Qualifications

• A minimum of 8+ years of related work experience in developing, implementing, or architecting information security systems with a strong understanding of regulatory requirements and compliance issues
• Knowledge of general security concepts and methods such as vulnerability assessments, privacy assessments, intrusion detection, incident response, security policy creation, enterprise security strategies, architectures and governance
• Understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and programming/scripting languages (C, Java, Perl, Shell)
• Demonstrated ability to develop new engagement opportunities in the information security advisory space and contribute to development of client deliverables and technical content
• Strong existing relationships within the Information Security or IT executive ranks (e.g., CIO, CISO, Director of Information Security, SVP and VP of Information Security)
• Project management of information security projects including development of project charters and plans, management of project execution and successful implementation of the planned solution
• Experience in process definition, workflow design, and process mapping
• Bachelor’s degree from an accredited college/university in an appropriate field
• Extensive knowledge in operations, system evaluations, and architecture

Equal Opportunity

CNM LLP is an Equal Opportunity Employer. All your information will be kept confidential according to EEO guidelines.