Security Consultant

Job Overview:Perform risk assessments on key IT processes or assets, identify vulnerabilities and propose solutions to mitigate risk Lead interviews with client security staff Evaluate both verbal and non-verbal communication from client staff Take notes during client interviews Review client provided documents and other materials related to banking processes and process management systems for completeness Evaluate client processes for compliance with documentation, regulations, and best practices Author assessment engagement cover letter, executive summary, and complete writing and review of final report Under general supervision with specific instructions, prepares business specifications from which technical specifications are formulated Good working knowledge of security and operating systems: Tandem, UNIX, Oracle, SQL Server, Windows/NT systems required Must have understanding and working knowledge of the organization to perform effective analysis, make recommendations and answer questions Excellent presentation, organizational and communication skills (verbal and written) Supervise business analysts and assume responsibility for report completion

Skills and Knowledge Required:Ability to "think on their feet" analyzing the answers to assessment questions and evaluating whether or not the response indicates that the topic should be investigated further Knowledge of risk and vulnerability assessment practices mandatory Experience in risk assessments or vulnerability assessments using guidelines from NIST, ISO, FFIEC, ISACA (CobIT), or other financial regulatory bodies Able to help other team members with risk assessment process questions Very good writing, editing and interviewing skills Ability to work under pressure on the road and in the office Able to learn new tools, terms, and audit/assessment processes quickly Knowledge of banking processes highly desired

Certifications or Background:5+ years experience as a security engineer, security analyst or IT auditor in financial industry and/or web environment highly desired Certified auditor in one or more IT or security functions (SSCP, CISA, ISO 17799, CISM, etc.)

Other:Must be available to travel 50+% of the month; travel will generally be scheduled 7+ days in advance Be able to learn assessment techniques and templates quickly Be able to follow established processes and templates for consistent quality deliverables


Please send resumes to Christina Romeo - cromeo@ccpace.com