Information Security Officer

Infojini Inc; Raleigh (NC); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Excellent compensation package

Job summary

A leading IT consulting firm is seeking an experienced Security Professional in Raleigh, North Carolina, to perform security assessments and implement improvement plans. The role requires developing information security standards and managing risks. The ideal candidate will have a Bachelor's degree in Computer Science, relevant certifications, and at least five years of experience. This position offers a competitive compensation package and a chance to work with major technology vendors.

Qualifications

• Minimum of five years of progressive experience in the Security field.
• Experience developing and implementing security standards and guidelines.
• Knowledge of the latest cyber security principles and threats.

Responsibilities

• Perform detailed security assessments and establish baseline security.
• Collaborate with IT teams to implement security improvement plans.
• Conduct audits of applications and network resources to identify vulnerabilities.

Skills

Information Security Management

Risk Management

Security Improvement Plans

Cyber Security Frameworks

Cloud Security Best Practices

Education

Bachelor's degree in Computer Science/Engineering

CISSP, CISM, CISO, CEH, GIAC/SANS certifications

Job description

Infojini Consulting is a full service IT consulting, services, and staffing firm with offices in Secaucus, NJ. Infojini Consulting is recognized as one of the fastest growing IT services and software development Companies. With a partnership of all major technology vendors, Infojini Consulting has built a strong Government and commercial customer base including fortune 100 companies and most state and federal agencies such as State of North Carolina, State of South Carolina, State of Maryland, State of California, State of Pennsylvania, State of Virginia, State of Washington and many others. Infojini Consulting is an equal opportunity employer and considers all qualified individuals for employment irrespective of their race, gender, age, color, sexual orientation. We offer an excellent compensation package.

Job Description

Perform a detailed security assessment and establish the current baseline.

Create an information security improvement plan and implement the plan by closely collaborating with other internal IT teams.

Create and maintain information security score card.

Establish Information Security and Risk Management programs. Some of the responsibilities include developing, implementing and maintaining DES information security enterprise standards, processes, procedures, regulations, and guidelines based on federal and state laws and mandates (e.g. NIST 800-53, IRS Publication 1075, FedRAMP, etc.).

Conducts system configuration and operations audits of discrete applications, network, and computing resources to identify potential vulnerabilities (e.g. Port Scans, Intrusion Detection and Prevention, Network Scans and Perimeter Security).

Provides leadership and guidance in information security and enterprise risks to business owners and agency staff.

Required Skills

• Demonstrated work experience developing and implementing Information Security and Enterprise Risk management programs.
• Experience developing, implementing and maintaining information security standards, processes, procedures, regulations, & guidelines
• Experience developing and implementing security improvement plans with effective results that are tracked and reported
• Experience configuring, implementing and managing all the various information security solutions
• Knowledge of the latest cyber security frameworks, principles, application threats/vulnerabilities, and secure coding practices
• Knowledge of cloud security best practices in the areas of Services, Infrastructure (IaaS), Platform (PaaS), and/or Software (SaaS).

Desired Skills

• Experience in the areas of NIST Risk Management Framework, IRS Publication 1075, FedRamp, Cloud Hosting, and FIPS
• Experience in the areas of Siem and Identity Management (IDM) solution implementations
• Ability to work with IT staff to transition knowledge as requested

Qualifications

One or more of the following certifications (current) CISSP, CISM, CISO, CEH, GIAC/SANS certified tracks, etc.

Bachelor's degree in Computer Science/Engineering or equivalent with at least five years of progressive experience in the Security field

Additional Information

All your information will be kept confidential according to EEO guidelines.