Spec, IT Security - Lead

The Lead IT Security Specialist will lead efforts to improve the IT security program including any security assigned engineering, threat and vulnerability tasks, identity management, information security management and application security programs.

• Provide project management capabilities to assigned IT security projects
• Leads and manages efforts of assigned FTE's, Contractors, and/or GIC assigned resources
• Be able to provide support to the team on a 24 hour a day, 7 day a week basis when necessary
• Implement and support day to day IT security capabilities of IDS
• Analyze data, trends, logs, and reports and be able to present the data in a organized professional manner
• Be able to provide guidance and training to those that are less experienced IT security specialists
• Be able to provide technical and functional guidance
• Establish technical and process related documentation and references - technical leader
• Be responsible for projects and project results
• Be accountable for the timeline and quality of tasks and assignments

Required Work Experience:

8+ years experience with the implementation and support of an IT Security program including aspects of threat and vulnerability management, security management, and application security related products, projects, procedures, and processes.

Ability to manage and lead assigned resources including contractors and company employees

Experience in developing, documenting and maintaining security policies, processes, procedures and standards.

Preferred Work Experience:

Audit, compliance or governance experience

Knowledge:

In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls. Familiar with management frameworks: International Organization for Standardization (ISO) 2700x , ITIL, COBIT and National Institute of Standards and Technology (NIST). In depth knowledge of risk assessment methods and technologies. Technical knowledge of mainstream operating systems (MS Office programs, Identity and access management (IAM), anti malware solutions, automated policy compliance. Network infrastructure - routers, switches, firewalls, etc.

Skills: work independently, lead IT security projects, judgement and decision making, performing risk, business impact, control and vulnerability assessments - network scans, application penetration testing and remediation methods, ability to work under pressure, strong analytical skills, communication - written and verbal, leadership, customer/client focus