Monday, November 13, 2017

Security Analyst

Job Title: Security Analyst
Duration: 12+ Months 
Location: Scottsdale, AZ 

Job Description: 
The Information Security Internal Controls Team is seeking an experienced candidate, with controls testing experience. The position will help build and support the Testing Program within the First Line of Defense (FLOD). The position will be responsible for playing a key role in designing and implementing, a comprehensive, risk-based program to assess the strength and validity of key IT & information security related controls. This role requires effective project management, communication and prioritization skills, focusing on the strategic building and execution of the Testing Program as a whole.

Job Responsibilities:
•    Serve as the First Line of Defense (FLOD) testing design and execution expert
•    Support the FLOD team leadership in the management and execution of the Independent Testing Program
•    Design FLOD testing steps for key Information Security controls
•    Execute and perform testing of security controls
•    Create and provide regular reporting of testing results
•    Work with a team in planning and executing the test plan
•    Conduct quality reviews of junior team members and provide guidance and support as needed
•    Coordinate with InfoSec/IT SMEs to ensure testing covers appropriate risks, and results are disseminated to the appropriate decision makers in a timely manner

Required Skills:
•    Must have excellent English language ability
•    Must have excellent verbal and written communication skills
•    Must have the ability to initiate and lead meetings with manager level personnel
•    Must have a strong understanding of control testing design and execution
•    Analytical, cross-referencing and deductive reasoning skills
•    Excellent project management, organizational, communication, presentation and interpersonal skills
•    Excellent ability to analyze risks in complex business/IT processes, and understand how controls work to mitigate those risks
•    Ability to collaborate across levels and hold a level of influence, organizing and motivating others, including those who are in more senior positions
•    Must display a high level of professional judgment, commitment, integrity, teamwork, and customer service

•    8+ years of experience with control testing in a large, complex IT environment
•    Experience with Information security controls and processes
•    Familiarity with business / IT processes and control testing practices

Preferred Qualifications:
•    Experience with control testing design and execution in a large, complex IT environment
•    Highly qualified candidates will have a background in IT compliance testing, audit, control design, or IT/Information Security testing related roles
•    Preferred to have exposure to banking or payment industry
•    CISSP, CISM, CISA, CIPP and similar certifications
•    Familiar with technology risks and controls including those found in cloud computing, operating systems, web technologies and enterprise networks.
•    Familiar with Risk Management, audit practices, and testing techniques
•    General familiarity with recognized IT control frameworks, such as Cobit, ITIL, ISO, NIST

Edwin Colaco | Sr Technical Recruiter- Resource Management Group
Intelliswift Software Inc 
39600 Balentine Dr., Suite 200 Newark, CA 94560   |    Phone: 510-370-4460 | Fax: 510-578-7710