Information Security Analyst/Security Documentation Specialist

Large Westborough organization seeks candidate who has experience developing, professional, customer-facing communications.? This position involves analyzing and redrafting approx. 2500 existing technical security responses as well as crafting new responses as inquiries arrive. The candidate must be a self-motivating and self-managing writer who can learn complex technologies quickly, and manage the entire process of writing top-quality documentation.? Ability to operate in a dynamic environment with minimal supervision and is willing to contribute to get the job done. You would be working with the Customer Security Management Office to understand response requirements as well as collaborating with engineers, customer service, legal, technical service and product personnel.

?

Desired Skills:

?3+ years experience with industry laws and regulations such as SOX, GLBA, HIPAA, SB 1386, FISMA, BASEL II, CFR Part 11 etc. Understanding of industry and regulatory requirements that impact information security such as Basel II, HIPAA, Sarbanes-Oxley, GLBA, PCI, etc. Experience implementing or maintaining at least one of the following compliance efforts:

-???????? Sarbanes-Oxley compliance

-???????? SAS 70 compliance3+ years experience with other frameworks/standards such as ISO17799, CMM, AICPA, NIST, COBIT, COSO etc. Experience working in complex environments with a high degree of organizational effectiveness Minimum 5+ years of broad technology experience in IT Strategy, Governance and Management

?

Technical skillsMinimum 3 years relevant exp in? IT Risk Management, IT Service Management, IT/Data Center Operations Knowledge in Active Directory security Knowledge of current issues in the IT and security fields Experience with end-user and site-to-site VPNs Experience with corporate-level virus, spam, and spyware prevention systems Strong knowledge in security and authentication/authorization protocols including Kerberos, SSH, SSL, S/Key, TACACS+, PKI, and RADIUS Experience with implementing firewalls, routers, bridges, switches, hubs as well as TCP/IP, IPX/SPX, NetBIOS, NetBEUI, Ethernet and token ring protocols. Demonstrated knowledge of network security at a deep level (including security at each layer of the TCP/IP stack, common threat/intrusion techniques, best-practice response and remediation, enterprise-level protection strategies, etc?)