Information Security Professional

Sonoma Consulting Inc.; Chicago (IL); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading IT consulting firm in Chicago is seeking an Information Security Professional to manage compliance tasks and security controls. This role demands a Bachelor's degree and over 5 years of experience in IT security compliance, particularly SOX compliance. Candidates with CISSP or CISA certifications are preferred. The position involves resolving compliance issues, coordinating with teams, and ensuring IT standards are met. Excellent communication and problem-solving skills are essential for success in this role.

Qualifications

• 5+ years’ experience working within IT security compliance.
• CISSP or CISA certifications highly desired.
• Ability to work on multiple complex problems.

Responsibilities

• Identify, analyze, and resolve compliance problems.
• Monitor IT standards and ensure compliance.
• Coordinate Business Continuity Plan activities.

Skills

IT security compliance

SOX compliance

Leadership

Communication skills

Problem solving

Education

Bachelor’s degree in a related discipline

Job description

Halo Group is a premier provider of IT talent. We place technology experts within the teams of the world’s leading companies to help them build innovative businesses that keep them one step closer to their customers and one step ahead of the competition. We offer a meaningful work environment for employees, attractive and interesting engagements for consultants, and cutting-edge digital innovation for our customers.

We delight in helping our customers execute their digital vision. Big projects or small, Halo Group knows that by combining the highest quality talent with our unwavering support, we will become an invaluable extension of the team. Halo Group's experienced consultants in Detroit, Atlanta and Dallas specialize in all areas of product/project governance, UX/UI, multi-platform applications, quality assurance/testing, cloud computing, and data analytics.

Job Description

Position : Information Security Professional

Location: Chicago, IL

Job Description:

Responsibilities:

The Information Security Professional is responsible for all tasks related to identify, analyze and resolve complex compliance problems. This role will manage, monitor and ensure compliance to security controls & procedures. The position will develop and implement processes to facilitate continual process improvements and evolution as it relates to IT compliance.

Specific Responsibilities

• Develop an understanding and in-depth knowledge of multiple lines of businesses to proactively identify and resolve compliance problems involving production systems and IT processes.
• Monitors/Administers Change Management procedures to ensure that changes are properly recorded. Responsible for reviewing requests for change (RFC) for completeness, categorizing them and conducting impact analysis and risk assessment. Perform random/regular audits of the change control processes and projects, determine and implement corrective actions as needed.
• Responsible for ensuring that all IT standards are met prior to moving proposed projects into the production environment.
• Escalate to Senior Management unresolved issues that remain open.
• Perform review and validation of documentation and evidence of compliance. Manage and ensure applicable remediations and implementations are executed.
• Collaborate with peers on compliance schedules and deliverables including Sox controls testing. Identify and implement process improvements for internal processes and those related to other IT teams.
• Coordinate Business Continuity Plan activities. Handle customer RFPs and audits as they relate to information security and compliance.

Qualifications

Job Title: Information Security Professional / Information Security / Information Security Consultant / IT Security

• Bachelor’s degree in a related discipline required
• 5+ years’ experience working within IT security compliance and SOX compliance
• Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA) certifications highly desired.
• Able to consistently contribute effort, leadership, and creative thinking to solving complex and significant problems in a collaborative fashion. Must be able to demonstrate an ability to work concurrently on multiple complex and sometimes ambiguous problems. Able to communicate complex concepts, problems and solutions clearly and effectively to all levels within the organization.
• Demonstrated ability to perform at the highest level of proficiency in utilizing tools and applications to complete assignments. Able to work on special projects to enhance internal system functionality from the operational business perspective.
• Ability to work well under minimal supervision.
• Ability to confidently and simply explain technical security issues without hype or buzzwords. Strong commitment to customer service. Results oriented, high energy, self-motivated. Excellent verbal and written communication skills.
• Experience engaging with leadership and stakeholders to establish strategic plans for programs and projects. Ability to facilitate productive meetings and work successfully in a team-oriented environment.
• Have the ability to work with technical and non-technical business owners to develop control solutions.

Thanks in advance, Tina.