Information Security Manager

Profile

Information Security Manager
The candidate will be responsible for information security policy assessments, enforcing compliance with firm security policies and applicable law, vendor management and security incident management. Working with the firm’s Information Technology Services; the Information Security Manager will coordinate and assess compliance audits, business continuity and disaster recovery programs, network penetration tests, vulnerability assessment scans and risk assessment reviews. Help develop, manage, audit and enforce security related policies and procedures. Manage compliance and respond to security assessments and audits by ISO, clients, etc. Manage periodic security vulnerability and penetration testing. Manage patch management program. Manage system logs and security-related infrastructure. Manage incident response and support systems. Manage and review infrastructure technology vendor contracts and risk assessments. Work with IT Management to ensure that Business Continuity program components are current, effective, and address business requirements. Participate in the design and deployment of new software systems, services, components, features, etc. Should have experience with IT security, compliance, risk and privacy frameworks such as ISO 27001, NIST 800-53, HIPAA, GDPR. Must have Knowledge of Windows system administration and Active Directory. Should have knowledge of network security principals, best practices and industry standards. Must have knowledge of security models that maintain and enforce security policies. Should have knowledge of security tools and concepts including: IDS/IPS; SIEM; Web Proxy; Encryption; Patch management; Vulnerability Scanning & Remediation; Forensics; Penetration Testing; DLP; Email Gateways; Anti-spam Services; MDM; Privileged Account Management; Log Analytics; Two Factor Authentication; Single Sign On; Antivirus. Must have exceptional communication skills both within and outside of the IT Department. Should have 3-5 years of experience working in Information Security. CISM certification preferred. Project management experience preferred. Previous law firm experience highly desired.

Company info

Sign Up Now - WashingtondcCrossing.com