PERS - Information Security Analysis

perfecta; Tigard (OR); On-site; USD 70,000 - 90,000; Full time

Job summary

Perfecta is seeking a contractor to develop and implement a comprehensive Information Security Awareness and Training Program in Tigard, OR. The successful candidate will analyze current security policies, create documentation, and assist in conducting training sessions tailored to the needs of OPERS.

This role demands an individual with strong experience in security policy development, stakeholder engagement, and project management. Travel and other expenses are not reimbursed, and the work is to be completed on-site.

Qualifications

• Experience in developing and implementing Information Security programs.
• Proven ability to create and document policies, standards, and procedures.
• Familiarity with NIST CSF domains and compliance requirements.

Responsibilities

• Analyze, recommend, and create documentation and guidelines for Security programs.
• Assist in the development of Security Awareness Training materials and content.
• Conduct assessments and manage policy exception processes.

Skills

Information Security Awareness Training

Policy Documentation

Stakeholder Engagement

Content Development

Project Management

Education

Bachelor's degree in Information Security or related field

Job description

Founded in 2017 Perfecta is a division and a wholly owned subsidiary of City National Security a well known and reputed company providing IT Consulting , Staffing and Security services throughout the United States. Perfecta brings a rich experience of over 12 years in providing fully scaled IT Consulting and Staffing & Recruiting services. Perfecta brings a successful track record of delivering value based quality professional solutions at economical price to its customers across the U.S. Perfecta has successfully executed various IT and Staffing projects with its government and commercial clients and has consistently provided quality services to its customers.

Job Description

Part I. General Information

Under this Statement of Work (SOW), the Contractor shall analyze, recommend, create working documentation, guidelines, policies, standards, instructional procedures, and conduct assessments to support the implementation of the following:

• PERS Information Security Awareness and Training Program
• PERS Information Security Program
• Reorganization and alignment of PERS Information Security policies, standards, and procedures

Part II. Work

The Contractor shall comply with OPERS contractual deliverable review and approval processes by working with OPERS Quality Assurance in utilizing the Quality Checkpoint process attached to this SOW as Attachment 1. Quality Checkpoint is a Quality Assurance process to verify that major deliverables in the project have been reviewed and approved by their respective stakeholders.

PERS Information Security Awareness and Training Program

Contractor shall assist OPERS CISO in the creation, documentation, and implementation of a structured Information Security Awareness and Training Program. Contractor shall work with OPERS to plan, document and implement solutions to fit the needs of OPERS. Tasks to support OPERS' Information Security Awareness and Training Program include, but not limited to:

• Define activities to be performed to enable and implement the Security Awareness and Training Program
• Research and document materials needed to implement the program
• Research and document delivery methods and related activities to implement the program
• Research, obtain stakeholder buy-in, and document a regularly occurring schedule of activities.
• Develop content for PERS specific, role based training for data/system owners/custodians.
• Develop content, produce materials for PERS specific training for staff.
• Deliver Security, Awareness and Training materials, presentations, etc. to targeted audiences

Reorganization of PERS Information Security policy structure

In the first phase of policy, standard, procedure creation, emphasis was placed on creating required policy documentation to address HPE findings. In this second phase, the emphasis is to consolidate and reorganize the policy structure, resulting in fewer policies, and more specific requirements, based on security domains:

• Identify and convert redundant policies to standards as appropriate
• Align policy structure to NIST CSF domains
• Address gaps by creating policies, standards, and procedures as identified and needed.

Implementation of PERS Information Security Program

Initialize and implement operation of Information Security program:

• Conduct Third Party and Software Development Information Security assessments
• Initialize policy exception requesting, approval, denial, and risk acceptance process.

Part III. Special Considerations

Contractor acknowledges and agrees that any and all information regarding OPERS installation, design, configuration, data migration will be kept confidential.

Part IV. Travel and Other Expenses

OPERS shall not reimburse Contractor for any expenses under this Contract. Work must be completed on-site, Tigard, OR

Additional Information

All your information will be kept confidential according to EEO guidelines.