Description

Act as the Information Security Business Architect, specializing in risk assessment and technical consultation for enterprise projects.

Responsibilities

• Consult on multiple projects to recommend security best practices and develop hardening guides.
• Review and evaluate technical solutions against relevant risk frameworks, regulations, and NC DIT Statewide Information Security Manual.
• Develop information security policies, processes, and procedures to support project requirements.
• Assist with PCI-DSS compliance activities and perform comprehensive risk assessments.
• Prepare detailed reports and presentations for senior management regarding project security status and issues.

Required Skills

• 5+ years of progressive experience as an IT information security professional in an enterprise environment.
• Expert knowledge of NIST 800-53 and experience performing risk assessments using this framework.
• Hands-on experience implementing and operating firewalls, IDS/IPS, SIEM, and network traffic capture/analysis.
• Experience with PCI-DSS, FISMA, OWASP, FedRAMP, and NC General Statute compliance.
• Experience implementing and operating enterprise-class server, storage, and data networking solutions.
• Experience completing NC DIIT Privacy Threshold Analysis (PTA) and Vendor Readiness Assessment Report (VRAR) documentation.
• Familiarity with the DHS Cyber Security Evaluation Tool (CSET).
• Any Graduate degree.

Preferred Skills

• Familiarity with IT architecture frameworks such as SABSA or TOGAF.

Key Skills

Education

Any Graduate