Sr Information Security Engineer
SUMMARY OF RESPONSIBILITIES
The Information Security Engineer will oversee all aspects of strategizing, designing, implementing and monitoring security practices and standards to protect sensitive data. This role will meet business partners and travel to local markets to assess and implement practices, test and monitor systems, and train team members to ensure strong understanding of practices. He/she will be the point of contact for all related security practice questions and lead the coordination of engaging external agencies to support company-wide security goals.
ESSENTIAL DUTIES
-
Collaborate with business leaders to assess current cybersecurity practices and review external agency security audits. Identify strengths, opportunities and gaps of practices to conceptualize a strategy that will mitigate organizational risks.
-
Design, develop and implement security standards and practices that align to organizational goals. Continuously scan the environment to provide recommendations to enhance the protection of personally identifiable information and other sensitive information.
-
Provide guidance and support to team members regarding the implementation of cybersecurity practices. Communicate important updates to team members regarding changes to policies and procedures.
-
Oversee the installation of software, such as firewalls and data encryption programs, to protect sensitive information. Maintain software by ensuring timely installation of updates and patches. Plan and direct the sunsetting of software when necessary.
-
Conduct penetration testing to identify system vulnerabilities and to test compliance with security practices. Prioritize and implement solutions to reduced risks of threats to sensitive data and schemes such as phishing.
-
Track data from system users, services and external threats to monitor networks and systems for security breaches, intrusions or irregular system behavior. Lead incident response activities, investigate system discrepancies, resolve issues and report findings to management.
-
Coordinate partnerships with external cybersecurity agencies to assist in implementing and maintaining security standards and practices.
-
Collaborate with Human Resources to drive awareness and develop training curriculum and/or job aids to ensure team members across the organization understand information security standards and practices.
-
Stay abreast of emerging cybersecurity practices and technologies. Evaluate, recommend and implement solutions that will enhance systems and networks.
REQUIRED EDUCATION AND EXPERIENCE
-
Bachelors degree in Information Security, Computer Engineering, Programming or equivalent work experience and/or education
-
Certified Information Systems Security Professional (CISSP) preferred. Or willing to obtain
-
Highly proficient with Microsoft Dynamics and Azure
-
Minimum 10 years of progressive experience in a cybersecurity role within a midsized company
-
Proven ability to conceptualize cybersecurity strategies and lead the implementation of concepts from design through ongoing maintenance
by via developer jobs - Stack Overflow
No comments:
Post a Comment