[SJ-JOB] Security Consultant, London
[email protected] 5 Aug 2008 22:36:30 -0000
| Newsgroups | gmane.comp.security.jobs |
|---|---|
| Message-ID | <[email protected]> |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Security Consultant Location: London, , United Kingdom Type: Permanent F/T Closing Date: 2008-09-05 Information Security Consultant Reference No. SF-317 Company Financial Location London Salary Neg Package Generous Start Date ASAP No. Required 1 The Role A comprehensive knowledge of the technology, practice and methodologies of information security and its governance within corporate structures which is capable of being applied to any information security engineering or consultancy issue. An understanding and appreciation of the intelligence process in order to develop intelligence assessments and analyses of the threats to, and vulnerabilities within, UK payments systems. A broad awareness of the potential consequences of compromise of information security controls The processes and experience necessary to conduct incident management and coordination to information security compromises at any point in the end-to-end payment process, in order to provide the focus for the industry’s response to electronic attack. An established credibility and track record in information security that contributes to maintaining the professional peer relationships with other centres of excellence of information security, such as those both domestically and internationally within government, law enforcement, academia, industry and the international CERT community. An in-depth awareness of the current UK payments landscape the participants and the governance of these payment systems and schemes, and their requirements for information security to enhance and maintain their integrity. PURPOSE OF JOB is to provide the lead for the industry’s Remote Banking Fraud Management Group which coordinates the industry’s cooperative activities in the area of remote banking fraud: to understand its nature and the trends; the scale and extent of such fraud; to develop initiatives to combat it; and to coordinate the UK payments industry’s response to attacks. Additionally it is to provide additional support, when required, for other groups supported by the Security Unit. MAIN ACTIVITIES AND RESPONSIBILITIES Fraud Data Analysis. Collection and processing of all information (total numbers, new developments, strategies and activity) relating to all UK bank Phishing, Beneficiary recruitment and malicious code. Incident Coordination. Support to Incident Handling in order to disrupt of E-channel fraud activity through malicious site takedown requests/ email address removal/ analysis of log data and dissemination of compromised account details/ malicious code analysis. The management of malware analysis contracts. External Liaison. Provide the central coordination point for UK banks liaising with: • International Computer Emergency Response Teams (CERTs). • Government and Law enforcement agencies. • Other e-commerce companies. Remote Banking Fraud Education and Awareness. Represent the UK member banks at conferences: presenting the work carried out in collaboration by the UK banks to tackle E-Channel fraud. Work with Corporate Communications to create reactive and proactive media statements. Understand and react to consumer attitudes through research (e.g. surveys). Brief Government on the threats to online banking and e-commerce. Maintain the consumer education site Coordination with other Industry Groups. Provide support to other groups as required to aid counter-fraud activities: Provision of information security assessments of the vulnerabilities and threats that lead to fraud. Research into new E-Channel threats. Research into use of Biometric authentication for the financial sector. Any other duties as may be required. Specialist Competency Experience in an information security related field for a minimum of 3 years. Operational incident response experience with an understanding of the organisations and processes involved. Analytical/reporting experience. London based but required to travel regularly locally and internationally JOB REQUIREMENTS --------------------------------------------------- Please note that in order to apply for any vacancy in the UK, you will need either a valid EC Passport or valid Work Permit enabling you to work in the UK. CONTACT --------------------------------------------------- Information Security Solutions Iain Sutherland [email protected] --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs