Individual contributor responsible for leading and managing numerous tactical engineering workflows, individualize security consultations for project teams and acting as the cross-domain security contact for a portfolio of business lines. This role will act as the tactical advisors and consultants to project teams working on everything from cloud application deployments to network infrastructure overhauls.
Individual contributor role providing guidance on directing, evaluating, developing, implementing, communicating, operating, monitoring and maintaining information security technologies, policies and procedures.
Essential Duties & Responsibilities
Performs a combination of duties in accordance with departmental guidelines:
1. Drive security adoption and delivery with IT management and project staff through risk assessments, implementation of security controls and integration with appropriate processes/tooling.
2. Leads cross-domain security engagement with project teams in all phases of the development and implementation process.
3. Identifies emergent vulnerabilities and evaluates associated risks and threats endemic to IT projects throughout CNA.
4. Capable of developing security threat assessments and security stories for application development and project teams.
5. Facilitates discussions on security architecture and security tooling with respect to IT projects.
6. Evaluates and advises on appropriate security methods and control techniques such as firewalls, intrusion detection software, data encryption, data backup and recovery.
7. Understand cloud security solutions and review incoming cloud projects to provide guidance and support to technical cloud teams.
8. Provide guidance on cloud security standards/policies and advise on enabling cloud native controls to meet highest cyber security standards.
9. Maintains an awareness of existing and proposed security standard setting groups, State and Federal legislation and regulations pertaining to information security and data privacy.
10. Identifies regulatory changes that will affect information security policy, standards and procedures and recommends appropriate changes.
11. Develops and implements security standards, procedures and guidelines for multiple platforms and diverse systems environments (e.g., firm-wide, distributed, client server systems, and e-applications).
12. Develops communications and related campaigns for information security awareness among all staff.
13. Reviews the development, testing and implementation of security plans, products and control techniques.
14. Assist in investigations as needed and recommends appropriate corrective actions for information security incidents.
May perform additional duties as assigned.
Skills, Knowledge & Abilities
1. Ability to influence change in corporate understanding and adoption of information security concepts.
2. Experience with solution architecting/engineering within the information security space.
3. Worked with security tooling, controls and/or architecting in a variety of roles.
4. Strong analytical and problem solving skills.
5. Robust communications and interpersonal skills and the ability to work effectively with peers, IT management and staff, and internal/external business partners/clients.
6. Solid understanding of security policy construction and publication.
7. Working knowledge of any of the common cloud platforms (AWS, Azure and Google Cloud Platform)
8. Ability to manage various technical projects to completion.
9. Willingness to learn new technologies, tools, applications and systems both supporting the information security organization and operations.
Education & Experience
1. Bachelor's degree in Computer Science, or related discipline, or equivalent work experience.
2. Typically a minimum of seven years of technical experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination.
AWS,data backup,client server systems,cloud security solutions,cloud security,security architecture,information security,information security policy,information security concepts,firewalls,Google Cloud Platform,IT management,IT projects,Computer Science,intrusion detection,Azure,network protocols,application development,analytical,communications,work effectively,interpersonal skills,Ability to influence,problem solving skills,architecting,construction,advise,consulting,control techniques,corrective actions,data encryption,technical account management,data privacy,Federal legislation,cyber security standards,operating systems,publication,investigations,risk assessments,risks,security,security controls,security tooling,security policy,Willingness to learn new technologies,testing,threat assessments,tooling,vulnerabilities
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.
