Director Information Technology Security Consulting Services

Job Description

If you’re interested, here is the challenge for your first year with CNM LLP:

• Manage Information Technology (IT) Security projects involving strategy, implementation, support, and software/hardware optimization related to security, privacy, and  business resilience
• Review and redesign security profiles to assess and improve how application security is being used as a part of the overall control environment
• Provide guidance and advise project teams in developing and enhancing IT security controls and resolving identified deficiencies within the IT department of our clients. Directors will recommend IT solutions that balance client resource constraints with the need to mitigate risk.
• Oversee successful project completion by prioritizing manager and senior tasks.
• Directors are responsible for negotiating the scope of the work, bill rates and budgets for recurring projects at existing clients. 
• Directors have the responsibility of maintaining and building the client relationships.
• Security strategy - Assess, design and implement a security strategy and governance program framework that describes the process, controls, organization and infrastructure to manage information security related concerns.
• Security implementation - Design, implement and integrate security solutions to address enterprise risks and exposures.
• Security governance - Design and implement security policies, procedures, and standards that describe pragmatic, risk-based mechanisms to maintain the confidentiality, integrity, and availability of information systems and the data processed therein.
• Security monitoring - Design and implement security solutions to monitor the efficiency and effectiveness of security operations, controls, and infrastructure.

Upon successfully demonstrating the skill set listed above you will have the opportunity to earn a promotion to Practice Leader. As a Practice Leader you will be responsible for:

• Practice development at your assigned existing clients.
• Assisting the partnership group in managing one of the administrative functions of the overall firm which include Human Resources, IT, Accounting, Scheduling and Recruiting. 

Qualifications

A hands-on knowledge of ISO27001, PCI-DSS, COBIT and Privacy Regulation requirements is required. Additional Qualifications are below:

• A minimum of 8+ years of related work experience in developing, implementing or architecting information security systems with a strong understanding of information security regulatory requirements and compliance issues
• Knowledge of general security concepts and methods such as vulnerability assessments, privacy assessments, intrusion detection, incident response, security policy creation, enterprise security strategies, architectures and governance
• Understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell)
• Demonstrated ability to develop new engagement opportunities in the information security advisory space; and the ability to contribute to the development of client deliverables and technical content
• Strong existing relationships within the Information Security or IT executive ranks (e.g., CIO, CISO, Director of Information Security, SVP and VP of Information Security)
• Project management of information security projects including development of project charters and plans; management of project execution and successful implementation of the planned solution
• Experience in process definition, workflow design, and process mapping
• Bachelor’s degree from an accredited college/university in an appropriate field
• Extensive knowledge in operations, system evaluations, and architecture

Are you ready for the challenge?  If so please apply on our website.

You may visit our company websitewww.cnmllp.com/careersto apply.

CNM LLP is an Equal Opportunity Employer

Additional Information

All your information will be kept confidential according to EEO guidelines.