Security & Compliance Consultant

Omega Systems; United States; Hybrid; USD 90,000 - 130,000; Full time

Job summary

Omega Systems seeks a Security and Compliance Consultant to provide security consultations for customers and internal teams, including planning and executing risk mitigation strategies. The role involves deploying data discovery platforms, managing scanning tools, and coordinating with SOC on reporting and investigations.

The ideal candidate has 3+ years in risk and compliance roles, a bachelor’s degree in a related field, and CISSP certification is preferred.

Qualifications

• 3+ years in roles that directly exposed them to managing risks and ensuring compliance with laws and regulations.
• Bachelor’s degree in information security, business management, law, finance, business administration or any other relevant field.
• CISSP certification preferred.

Responsibilities

• Deploy and manage data discovery platform(s).
• Deploy and manage risk and security related scanning tools and applications.
• Conduct periodic scans of customer networks to discover vulnerabilities.
• Lead incident response activities with customers.
• Coordinate with SOC team on security reporting and issues.
• Coordinate technical investigations and breach reporting to management.

Skills

Risk management

Regulatory compliance

Information security

Audit & governance

Effective communication

Education

Bachelor's degree in information security or related field

Job description

OMEGA SYSTEMS JOB DESCRIPTIONPosition: Security and Compliance ConsultantReports To: Security and Compliance OfficerDivision: ITFSLA: ExemptOffice Designation: In Office, Hybrid, RemoteUnder the guidance of the Manager, SOC, this position is responsible for security related consultations with OMEGASYSTEMS Customers and employees working from OMEGASYSTEMS offices as well as Customer locations and remote locations. Security and Compliance Consultants coordinate with customer Compliance Officers and various business units on creating standardized processes and tools for identifying and implementing regulatory rules sets, auditing and tracking of policies and operating procedures, and help manage the overall risk and security posture of a customer’s environment.Functional Responsibility and Task StatementsPlanning ResponsibilitiesOrganize and assist in developing plans of actions for risk management resolution.Organize and assist in planning for deficiencies identified in security assessments.Planning with customers for budgetary needs to meet risk and security objectives.Operational ResponsibilitiesIdentifying and eliminating the risks of noncompliance, both externally and internally.Assisting with educating the workforce on information security through training and building awarenessDeveloping scopes for remediations efforts and managing regulatory or compliance related standards and assessments.Leadership and People ResponsibilitiesWork with other colleagues within OMEGASYSTEMS teams to deliver an effective security service offering.Help ensure Customer security services teams are focused on achieving results using all resources available from initiation to resolution.Strong problem-solving and logical thinking skills, able to absorb and relate to new technical concepts quickly and build on knowledge learned.Strong verbal and written communication skills, particularly an ability to relay technical concepts to a business audience.Ensure that effective working relationships at all levels are achieved by simplifying complex technical messages and acting as an advocate of OMEGASYSTEMS Customer support teams both externally and internally.Technical Responsibility and Task StatementsDeploy and manage data discovery platform(s).Deploy and manage risk and security related scanning tools and application(s).Conducts periodic scans of customer networks to discover vulnerabilities.Experience designing secure networks, systems and application architecturesDirect experience with anti-virus software, intrusion detection, firewalls and content filteringDevelop and review internal company policies and working with customer to see that they are respected.Report to customers concerning the organization’s compliance with laws and regulations.Assist in dealing with noncompliance situations, creating realistic plans to overcome them.Conduct regular audits to identify potential weaknesses and noncompliance situations.Assist with penetration testingCoordinate efforts with SOC team on security related reporting and issues.Coordinate incident response activities with customers.Lead technical and forensic investigation activities on breach(s), preparing any reports of findings for management.Security awareness training of the workforce on information security standards, policies and best practicesKnowledge of disaster recovery technologies and methodsIncumbent(s) in this position may be required to perform other duties and special assignments not specifically stated.Environmental: The job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, etc.Travel Requirements: Minimal travel is required for this position.Desired Qualifications and SkillsRequired3+ years in roles that directly exposed them to managing risks and ensuring compliance with laws and regulationsBachelor’s degree in information security, business management, law, finance, business administration or any other relevant fieldCertified Information Systems Security Professional (CISSP)PreferredMS in Computer Science or Information ManagementEEO STATEMENTIt is the Company's policy to provide equal employment opportunity for all applicants and employees. Omega Systems provides equal employment opportunities to all qualified individuals without regard to actual or perceived race including hair texture and natural hair styles), color, religion, religious creed (including religious dress and religious grooming practices), sex (including pregnancy, perceived pregnancy, childbirth, breastfeeding, or related medical conditions), gender, gender identity (including transgender identity, status and transitioning), gender expression and sex stereotyping, national origin, ancestry, citizenship, age, physical or mental disability, legally protected medical condition or information (including genetic information), family care or medical leave status, military caregiver status, military status, veteran status, marital status, domestic partner status, sexual orientation, status as a victim of domestic violence, sexual assault or stalking, enrollment in a public assistance program, engaging in protected communications regarding employee wages, requesting a reasonable accommodation on the basis of disability or bona fide religious belief or practice, or any other basis protected by local, state, or federal laws. Applicants, as well as employees, who are or become disabled must be able to perform the essential job functions with or without reasonable accommodation. The Company shall determine reasonable accommodation on a case by case basis in accordance with applicable law.