Information Security Manager

Chicago, Illinois 60637

Employment Type:
Direct
Date Added:
May 12, 2015

Palace Gate Corporation is currently seeking an Information Security Manager for one of our premier clients in Chicago, IL. This is a fulltime direct hire opportunity.

The Information Security Manager directs all activities related to the development, communication and management of policies, controls and practices supporting IT compliance, risk, vulnerability and information security objectives. In addition, the Information Security Manager ensures that IT compliance and security activities support Enterprise business objectives and are aligned with executive risk tolerances and expectations. The Information Security Manager will report directly to the Chief Information Security Officer.

Qualifications and Experience:

  • 8+ years of relevant technology experience in multiple areas 4+ years of experience leading a technical team.
  • Experience with HIPAA.
  • Understanding of project management methodologies and tools, including prior experience managing diverse, cross-functional, cross-departmental projects and technologies.
  • Experience/Knowledge of the following technologies: including Qualys, Nessus, QRadar, Palo Alto Firewalls (HA), Cisco ASA Configuration, Casper, Encryption, Security Standards and Compliance, Mac, Linux, Windows and Syslog.
  • Demonstrates technical experience/knowledge in the following domains. IT Governance, Protection of Information Assets, Systems and Infrastructure Lifecycle Management, Information Security Program Management, Information Risk Management.
  • Working knowledge of Infrastructure Security Concepts (Firewalls, DMZ’s, Intrusion Detection/Prevention Systems, Network Security, desktop, laptop and mobile).
  • Initiates, leads and manages IT risk management, compliance, vulnerability and security governance activities.
  • Translates compliance and technical requirements into relevant and understandable terms.

Education and Certifications:

  • CISM, CISSP or similar certifications are desired
  • Bachelor&_#39;s Degree in Computer Science or related field and/or equivalent IT experience

Duties and Responsibilities:

  • Drive the implementation of framework to support IT governance, risk and compliance objectives. Realize significant, measurable gains in IT Governance, Risk and Compliance ("GRC") practice maturity.

  • Leverage risk management activities to safeguard IT&_#39;s support of the delivery of business performance.

  • Provide end-to-end expert leadership on how to effectively achieve and sustain compliance with regulatory, industry and contractual obligations, as well as information security policies and practices.

  • Direct security risk assessments and management testing of IT controls.

  • Drive continuous improvement in IT governance, risk, compliance, vulnerability and security practices based on expert knowledge in domain areas, industry best practices, business objectives and risk tolerances.

  • Lead initiatives to regularly assess the adequacy and effectiveness of IT controls, security policies, and direct remediation activities and initiate actions to ensure that compliance and security gaps are successfully addressed.

  • Manage individual and team workloads to deliver agreed upon commitments. Lead strategy development in collaboration with senior leadership.

  • Develop, document and maintain repeatable mechanisms to determine, measure and report to management an accurate view of significant current and near-future IT-related risks, the risk appetite and the risk tolerance of the organization and its business partners.

  • Develop and manage compliance and security roadmaps in collaboration with senior leadership, formulate and broker support for a portfolio of necessary remediation initiatives, drive those initiatives forward, and provide leadership over resulting project efforts.

  • Integrate the overall risk, compliance, vulnerability and security structures within IT.

Qualified candidates may send their resume to: jennifer@palacegatecorp.com

Palace Gate Corporation is an information technology consulting and full-time placement firm that is committed to the success of our clients and our talented placements alike. Palace Gate is consistent in matching the right people with right opportunity. Our company approach is simple: understand our clients’ requirements, business needs and cultures in order to quickly identify the best resources to meet those needs and achieve business success. Palace Gate Corporation offers full medical and dental insurance, 401K, as well as weekly direct deposit.

For a list of all our positions, please visit www.palacegatecorp.com