Description

Required Skills

 

• In-depth exposure to technical configurations, technologies, and processing environments in one or more projects of similar size and complexity to the client.
• In-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls.
• Knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans.
• Documented experience with common information security management frameworks, such as International Organization for Standardization (ISO) 2700x and the ITIL, SOX, COBIT and National Institute of Standards and Technology (NIST) frameworks.
• Experience in architecting and implementing cloud-based security solutions.
• Extensive knowledge of security tools and capabilities, such as: IDM and SSO.
• Extensive experience in integrating security tools and 3rd party vendor solutions.
• Exceptional planning, organization, communication, prioritization, and business analysis skills.
• In-depth knowledge of risk assessment methods and technologies.
• Proficiency in performing risk, business impact, control, and vulnerability assessments.
• Excellent technical knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, identity, and access management (IAM) systems, anti-malware solutions, privilege access management (PAM), data loss prevention (DLP), encryption at-rest and in-transit, multi-factor authentication (MFA), end-point-security, vulnerability scanning and patch management, automated policy compliance tools, and desktop security tools.
• Experience in developing, documenting, and maintaining security policies, processes, procedures, and standards.
• Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Documented written and verbal communication skills.
• Experience working with modern issue tracking systems (JIRA)
• Exposure to technical configurations, technologies, and processing environments in one or more projects of similar size and complexity to the client.
• Ability to interact with personnel at all levels and across all business units and organizations, and to comprehend business imperatives. 
  
   

Preferred Qualifications

 

• Extensive experience with Human Resource and Payroll systems security requirements.
• In depth exposure to defining and implementing end user security protocols in a large public or private sector entity comparable in size to the client.
• Experience with AI security
• Experience with implementation of AI tools within a government agency
• Experience with WorkDay Human Resource and Payroll solution, with an additional preference of implementation within a government agency.
• Experience with WorkDay Prism data and reporting solution.
• Experience with WorkDay user security management as a member of a business (non-IT) team.
• Experience in transitioning traditional IT security functions to business teams.
• Extensive experience with Software-as-a-Service cloud implementations particularly those in which legacy on premise applications have been migrated to cloud delivery options.
• Experience operating end user security protocols, policies, and other in a large public or private sector entity comparable in size to the client.
• Experience at implementing technical configurations, technologies, and processing environments in one or more projects of similar size and complexity to the client.
• Experience with Audit, compliance, or governance actions.
• Experience with Microsoft security tools and functions
• Experience with Snowflake security functions
  
   

Minimum Entrance Requirements

 

• Bachelor's degree in computer science, system analysis or a related study, or equivalent experience in the field of audit compliance and security risk and compliance management.
• Minimum of nine years of design and implementation experience in IT, with a deep knowledge in a minimum of two of the following technical disciplines: infrastructure and network design, application development, application programming interfaces (APIs), middleware, servers and storage, database management, data security, and system administration and operations
• Experience in generation of Security materials, including but not limited to compliance adherence, security operational procedures, security implementation plans, and network and security diagrams.
• Minimum of five years of security architecting design and implementation with security certifications, such as: SIA Security +

Key Skills

Education

Bachelor's degree