Manager - Cybersecurity and Privacy

Mô tả công việc
Tóm tắt công việc
A career in our Cyber Security practice, within Risk Assurance Compliance and Analytics services, will provide you with the opportunity to assist clients in developing analytics and technology solutions that help them detect, monitor, and predict risk. Using advanced technology, we're able to focus on establishing the right controls, processes and structures for our clients to ensure that decisions are based on accurate information and assure that information provided to third parties is accurate, complete, and can be trusted.
Our team helps business leaders protect and manage their risk related to information regarding technology, people, systems, processes, culture, and physical surroundings. We help clients' understand their current capability and develop a plan to target cyber security investment, helping to respond to actual cyber incidents, and advising on legal issues related to breaches, data privacy, and protection.
Demonstrates extensive knowledge of implementing security architecture and strategies to deliver security advisory services to clients that include:
-Aligning and integrating the Infosec strategy with corporate security and business goals;
-Developing and maintaining the overall Infosec strategy, mechanisms for policy enforcement, definition of ownership, monitoring mechanisms, and process and controls;
-Designing and maintaining security architecture both at the enterprise and solution levels
-Demonstrates extensive knowledge and success with assisting on, client-facing business development, engagement delivery, practice development and thought leadership as it relates to the development, assessment and implementation of Information Security solutions.
-Demonstrates an extensive knowledge of managing project work streams in a system security, controls or information security management environment, specifically two or more of the following information security domains:
-Security Architecture and Strategy (Integrated Risk Management);
-Identity & Access Management;
-Data Leakage Prevention; Focus on Data Flow, Encryption;
-Large Complex Program Execution/Implementation;
-Security Function Design and Governance;
-Incident Management;
-Security Infrastructure.
-Demonstrates extensive knowledge and success interpreting security industry standards (ISO 27001/27002, PCI-DSS, NIST 800 series, COBIT), especially as it relates to the following:
-Building an InfoSec Management System and/or program;
-Managing internal controls, risk assessments, business process and internal IT control testing or operational auditing.