277938 – Security Consultant

contract until 9/30/2012 with likely 1 year extension
position closes on 1/5/2012

IT Security consultant is needed to facilitate immediate and comprehensive review of OCTO IT security policies and procedures to identify gaps, update exisiting policies and to recommend implementation of new security policies and procedures to CTO.

Provides review, guidance and development of OCTO IT security risk assessment policies and procedures and monitors adherence in order to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks and data. Guides and assists systems staff to ensure the proper and timely implementation of information systems security standards. Conducts IT security risk and vulnerability assessments for planned and installed systems as requested. Provides guidance to staff pertaining to the preparation, authentication, safeguarding and transmission of sensitive and confidential materials.

Must be highly articulate with excellent writing skills

Required Experience:
Exp. providing security policy guidance/publication in large enterprises (10  Years)
Exp. establishing IT security policies for financial or health institutions (10  Years)
Experience in setting IT security standards (8  Years)
Responsible for crafting policy, planning and mgt concepts (6  Years)
Exp. translating goals for security into effective IT security policies (Highly desired)
CISSP Certification (Highly desired)
CISM Certification (Highly desired)
Experience with PCI DSS (Desired)
Broad experience and responsibility for ERM (Highly desired)
Working knowledge and implementation of FISMA and NIST security standards (5  Years)

Work Location:     Strategy & Special Operations: 441 4th St NW, Suite 930 South