Job Description

Job Description: Performs professional level IT Security duties related to analyzing security related information produced by the operating environment against industry standards, and control frameworks. Produces policy, program, process, and procedure related documentation to support controls required by the organization. Reviews and incorporates controls frameworks enumerated control standards and procedures into the security programs as required based on risk management. Performs risk management capabilities in order to select applicable control frameworks for inclusion into the security program. Performs professional level IT Security duties related to designing, configuring, and administrating security platforms and software. Performs related engineering duties to augment security solutions as needed in order to maintain security controls. Develops engineering standards to which security tools must operate to maintain operational efficiencies for prescribed control standards. Architect security solutions and secure IT solutions in order to achieve the highest level of control implementation feasible. Requirements: Duties and Responsibilities:

• Research and design security configurations to implement, enhance, or maintain security solutions to provide the appropriate and best technical controls the solution is capable
• Perform release management of designed security configurations in order to perform proper testing and obtain approvals for
• Create test scenarios for security configurations to determine feasibility of implementation and operation, perform tests, and report on test scenario
• Deploy and Implement tested releases as designed, tested, and released in order to maintain technical security
• Measure and Manage the existing configurations to ensure that security controls remain operable and effective as
• Report on any configuration deficiencies noted during measurement and management of the existing configurations.
• Develop information security policies for the organization to enforce to ensure security controls required by management are implemented and operating
• Develop security programs according to the information security management program to ensure that the relevant functions of security are operationalized with people, process, and
• For each program managed develop business processes to enable the organization to operate according to the
• Create step by step procedures to be carried out in order to carry out the business processes in the security programs.
• Measure and Manage the existing policies, programs, processes, and procedures to ensure that security controls remain operable and effective as
• Report on any operational deficiencies noted during measurement and management of the existing policies and programs
• Research and Development: In security all things must be based on industry best practices and developed in a methodical
• Requirements Analysis and Design: All security solutions must be developed according to requirements from leadership and/or control
• Configuration Management: Security configurations must be properly documented and tested to ensure they have no adverse impact to the business and meet the control objective the requirements are based
• Continuing Education: Information Technology and the threats to it are constantly evolving so security professionals must stay at the forefront of the
• Communication: A major component of security is being able to articulate the technical complexities to relevant stakeholders in order to educate and obtain
• Integrity: We must apply the upmost integrity to what we do in security to ensure that we can maintain confidentiality, integrity, and availability of systems and
• Research and Development: In security all things must be based on industry best practices and developed in a methodical
• Requirements Analysis and Design: All security solutions must be developed according to requirements from leadership and/or control
• Configuration Management: Security configurations must be properly documented and tested to ensure they have no adverse impact to the business and meet the control objective the requirements are based
• Continuing Education: Information Technology and the threats to it are constantly evolving so security professionals must stay at the forefront of the
• Communication: A major component of security is being able to articulate the technical complexities to relevant stakeholders in order to educate and obtain
• As well as other duties as assigned

Job Tags

Similar Jobs