Senior IT Security Analyst  

Reporting Arrangement:

The Senior IT Security Analyst will report to the Information Technology Specialist (Information Security) through the Information Technology Officer (Information Security). He/She will report full time during the engagement period at the client.

Responsibilities:

The position requires an understanding of information security and information security governance, ability to understand business issues and processes and to articulate the business context of projects and processes.

Specifically, the resource will ASSIST the IT Specialist (Information Security) in the following responsibilities:

• Lead the security governance stream through assigning work to and conducting initial review of work done by junior analysts;
• Perform IT risk assessments, security reviews, configuration reviews, and review of solution design and functional requirements documents;
• Provide subject matter expertise in process and related components of client’s identity management solution;
• Supervise the review of user access to data and programs for both regular and privileged users, and resolve issues with primary users, as needed;
• Coordinate security assurance activities, which consists in providing or requesting evidence to verify compliance against approved security baselines;
• Assist in the development and implementation of information security policies, standards, and processes;
• Track the status of all security-related audit findings and assisting in the closure of the significant findings in a reasonable amount of time;
• Tracking the status of all security-related remediation resulting from the yearly attestation activities;
• Assist the IT Officer (Information Security) in conducting classroom-based security awareness sessions; and
• Other duties that may be assigned by the supervisor.

Duration:

Initial engagement is for a period of 6 months, subject to possible extension.

• Bachelor's degree and CISA, CISM, Security+ or equivalent certification.
• Have at least 7 years of IT security, IT security governance, IT audit/compliance, or related experience.
• Have knowledge in computer networks, systems, and/or web applications.
• A broad range of knowledge of Information and Communications Technology as applied in an enterprise environment.
• Knowledge of the practical application of engineering science and technology.
• Very attentive to details and methodical with work.
• Strong communication and interpersonal skills and ability to operate in a matrixed environment.
• Should have the ability to handle multiple tasks and priorities.
• Should be able to supervise more junior analysts