Director Information Security

Profile

Director, Information Security
The candidate will be responsible for managing the firm’s information security team including policy creation, compliance, security systems design, implementation, and monitoring. Will also be responsible for leading the firm’s Computer Security Incident Response Team (CSIRT). Develop, gain approval for, and promulgate security and related policies and procedures including education of IT staff and firm personnel in same. Provide oversight for all security products including SEIM, firewalls, VPNs, IDS,IPS, encryption, malware detection, anti-virus, anti-spam and anti-spyware security products. Review and prepare responses for the IT-relation sections of client-generated Outside Counsel Guidelines and/or Security Audits. Understand current Data Privacy and HIPAA regulations and implement processes and/or technology to ensure compliance and data protection. Sit as a member of the firm’s IT Change Control Board; review and prepare Security Impact Assessments for all proposed changes; provide security input into engineering and architectural design reviews. Perform analysis of events and seek resolution with minimal supervision Deploy host-based and network security equipment and software including, but not limited to firewalls, intrusion detection systems, proxies, and multi-factor authentication. Lead incident response and work with IT stakeholders to build definitions in response to new threats. Prepare and deliver reports, recommendations, and alternatives that address existing and potential trouble areas in the systems across the organization.

Company info

Sign Up Now - WashingtondcCrossing.com