Job Description
Security Engineer
Location: United States
Permanent
$130,000.00 – $140,000.00 / Yearly
Description
Robert Half is looking to hire an experienced IT Information Security Officer for a leading Technology company that partners with companies globally to make and manage content. This role is fully remote and can be anywhere in the US. The IT Information Security Officer will be responsible for overseeing information security, cybersecurity, and IT risk management programs based on industry-accepted information security and risk management frameworks in the Americas.
Responsibilities:
- Develop and manage the frameworks, processes, tools, and consultancy necessary for IT to properly manage risk and to make risk-based decisions related to IT activities.
- Proactive at identifying risk while developing recommended mitigation/compensating remediation processes, procedures, patches, and upgrades to reduce the security gaps.
- Assist IT managers and staff, with customer and regulatory audits and facilitate management response and remediation efforts when and where applicable.
- Ensure overall IT compliance with regulatory requirements through proactive planning and communication, ownership, and relationships.
- Receives security incidents and conducts appropriate level of investigations; prepares written findings, recommendations, and follow-up evaluation; and analyzes patterns and trends.
- Setup, maintenance, and security of Linux operating and Windows systems in support of cybersecurity tools.
Requirements
Must haves:
- 5 years IT Security experience
- CEA, SAN, CISM, or CISSP certs
- Knowledge and understanding of best practices in governance, risk, and compliance standards.
- Knowledge and experience with networking concepts, protocols, and services.
- Knowledge of vulnerability scanning, and firewall risk analysis tools is desirable.
- Proven problem solver with the ability to provide in-depth analysis of complex problems, manage risk and provide timely and accurate decisions.
- General knowledge of information security regulatory requirements and standards such as ISO 27001/2, SANS top 20, and NIST 800-53.