Sr. Information Security Engineer

Profile

Apply Now
Sr. Information Security Specialist
Located in Santa Monica, CA
The Information Security Specialist is responsible for managing all compliance obligations for Demand Media, primarily Sarbanes Oxley. This role works within the Information Security Team who is responsible for all Information Security and Risk Management enterprise wide and is supported by a team of security engineers and a senior manager.
Job Responsibilities
Manage compliance programs (SOX, PCI, Breach & Disclosure, OFAC, DMCA, etc.)
Lead and perform internal audit role, remediation of deficiencies and propose design enhancements
Ensure project documentation is complete, current and stored appropriately.
Coordinate and conduct quarterly enterprise risk assessments leveraging the Director, Information Security and Security Engineers based on the Information Security Policy, supporting standards and procedures, compliance requirements, adherence to information security best practices and standard business risk mitigation.
Coordinate across business and IT teams to conduct risk assessments.
Document findings in risk analysis report.
Work with InfoSec team members, business units and IT counterparts to document risk treatment plans.
Develop, manage and maintain enterprise data flows (entity level, by business unit, and by compliance regulated data type).
Update data flows quarterly through the risk analysis process.
Participate in security event investigations producing incident response documentation and ensure that corrective actions are implemented.
Assist with the development, implementation, training and auditing of the Information Security Program and governing Policy, Standards and Procedures.
Assist Information Security Awareness Program communicating and championing policy, standards and procedures enterprise wide
Creation of training materials
Lead auditing of adherence to the Policy, Standards and Procedures company wide
Assist auditors, consultants, customers and other third parties with information security questions, reviews, investigations, etc.
Communicate audit and review results to appropriate parties and ensure that issues are addressed and corrective actions are implemented.
Report to management the effectiveness of data security as implemented by internal and external business partners and make recommendations for the adoption of new procedures or controls
Participate in proactive research and provide recommendations for continuous improvement.
Foster good working relationships with business unit managers, IT and engineering counterparts to ensure the organization meets its objectives in a risk controlled manner.
Perform other tasks as directed by the Director, Information Security
Requirements
BS/BA degree and 5 years of work experience
Experience designing compliance programs and internal auditing
SOX, PCI, data breach notification laws required; European Union laws a plus.
CISA Certification required; CISM and/or CISSP a plus
Understanding of network architectures and design, technical and physical security controls, Windows Active Directory, Windows-Linux server, desktop operating systems; database and application architecture, etc. is required.
Highly proficient with Microsoft Office Suite and Visio
Experience in working across multiple teams/business units conducting risk assessments and threat modeling.
Proven track record of working collaboratively on compliance and security initiatives.
Excellent technical writing skills
Must be able to summarize and communicate technical data to a non-technical audience.

Company info

Sign Up Now - WashingtondcCrossing.com