Senior IT Security Enginner

PSG Global Solutions; Mooresville (NC); On-site; USD 80,000 - 100,000; Full time

Job summary

A leading IT services company is seeking an Information Security Engineer to join their IT Digital team in Mooresville, North Carolina. This role will focus on compliance and security administration, requiring certifications like CISSP or CISA and experience with PCI standards and audit management. The engineer will manage security audits and participate in audit preparations, contributing to the company's commitment to information security.

Qualifications

• Current security certification such as CISSP or CISA preferred.
• Experience managing audits, planning tasks, and compliance reporting required.
• Knowledge of PCI standards and security controls essential.

Responsibilities

• Manage, plan, and execute security audits and compliance tasks.
• Participate in PCI audit preparation and remediation projects.

Skills

Security certifications (CISSP, CISA)

Audit management

Compliance reporting

Knowledge of PCI standards

Information security knowledge

Microsoft Active Directory

Job description

Our mission is to empower clients, colleagues, and communities to achieve aspirations while building lasting, caring relationships.

Job Description

Summary:

We are seeking an Information Security Engineer to support the IT Digital team (web/mobile). The position will include a mix of compliance related work (60%) and security administration duties (40%).

• Compliance work will include the management, planning and execution of security audit, collection of evidences, and follow-up on daily, monthly, yearly tasks.
• Plan and participate in PCI audit preparation, 3rd party audit, run reports, participate in remediation projects.

Requirements:

• Current security certification such as CISSP, CISA or other audit certifications are preferred.
• Require experience managing audits, planning tasks, prioritizing, compliance reporting.
• Should have knowledge and experience working with PCI standards.
• Should have experience working with system, firewall, database, application logs.
• Understanding of technical aspect of information security including TCP/IP, Firewall, Encryption, Certificates, IPS, syslogs and SIEM, Antivirus, APT, SIEM, OWASP.
• Must be experienced in Microsoft Active Directory, security settings, group policies.