IT Security Professional

Accretive Solutions is a national consulting firm providing accounting & finance, corporate governance and  information technology services to a wide range of public and private companies. The Dallas Technology Risk Management Services group  is looking for a professional resource to provide the following:

 

Primary ResponsibilitySecurity Assessment Services; and/or 

Secondary ResponsibilityIT Audit / Compliance Services

 TRMS Security Services Consultants will work as part of a team to conduct detailed Information Security Assessments, and Risk & Control Assessments of information systems and related infrastructure areas at the Client sites. Consultants will analyze the assessment data, prepare reports and make recommendations / presentations to Client management.   Consultants will be trained in Accretive Solutions’ Security Assessment Methodology and software technologies.

 

REQUIREMENTS:Bachelor’s degree preferred / advanced degree a plus. (Computer Science, Information Systems, or related)Prior IT Security consulting and industry experience preferred (3-5+ yrs).2+ years experience in IT Security Compliance / Risk Assessments/Audits required.Ability to communicate at all levels of an organization from the end user to senior management within both the business and IT areas.  Able to present technical information in plain English.Prior project management and leadership experience preferred.Ability to articulate IT best practices.General understanding of various information security compliance areas such as HIPAA, GLBA, PCI, SOX etc.Two or more of the following certifications is preferred: CISSP, GSEC, CEH, LPT, MCSE, CCNA, CISM, CISA or other relevant (networking & security) certifications.Ability to travel Only local Dallas-Ft. Worth metroplex candidates will be considered as we will not pay for relocation or interviewing expenses.

 

REQUIRED TECHNICAL SKILLS:Ability to perform Security Audits on wired and wireless networks, Windows and UNIX servers, and desktops and  applications.Advanced UNIX Command line experienceVulnerability AssessmentsPenetration Testing / Ethical HackingUnderstanding of Secure Configuration & Management PracticesStrong Experience in Vulnerability Scanning and Sniffing technologies such as ISS, NESSUS, NMAP, SNORT, eEye Retina Scanner etc. Analysis of Enterprise IDS systems/logsOperating System, Application and Network HardeningWireless Security protocolsBCP / DR practicesFirewall and router configuration, switches, secure network architecture, VPNs, etc.Windows and UNIX server platformsKnowledge of one or more of the following programming languages is preferred: Python, C++, .NET, Visual Basic, PerlIncident Response experience is a plusDigital Forensics and experience working with law enforcement is a plus

PERSONALITY:Ability to work with little direction from senior managementAbility to work as part of a team to deliver in tight timeframes and respond quickly in an ever-changing environmentDedicated to achieving results, while focusing on quality and accuracy, and with the understanding that sometimes that means working longer hoursDetail oriented and diligent in delivery; strong balance of technical and soft skillsProfessional presence and ability to work with large, high-profile ClientsDesire for continuous learning and development as a security professional