[SJ-JOB] Manager, Information Security, New York
[email protected] 11 Sep 2008 16:58:51 -0000
| Newsgroups | gmane.comp.security.jobs |
|---|---|
| Message-ID | <[email protected]> |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Manager, Information Security Location: New York, New York, United States Type: Permanent F/T Closing Date: 2008-10-10 Job Description The Information Security Manager is a member of the Information Security function reporting directly to the Chief Information Security Officer located in the New York corporate office. The Information Security Manager will be primarily responsible for managing user access and authorizations within the company’s SAP environment. This includes security process design, development and support leveraging SAP’s GRC Access Control software with regards to Sarbanes Oxley compliance standards. This position will interact frequently and maintain relationships with the country security leads, the business process owners and the internal audit team. The successful candidate will also contribute to the information security function in ongoing operational activities related to the availability, integrity and confidentiality of business information, in compliance with the organization's information security policies. Primary Responsibilities • Develop and maintain SAP authorization process design and related documentation using SAP’s GRC Access Control modules. • Communicate and translate SAP authorization requirements among business process owners, country security leads and internal audit. • Support the local management in countries analyzing critical SAP authorization assignments and segregation of duties conflicts. • Provide SAP authorization issue resolution support. • Facilitate periodic SAP authorization review with the key business process owners. • Develop, communicate and ensure compliance with organizational security policies and standards. • Create and manage information security awareness training programs for all employees, contractors and approved system users. • Provide subject matter expertise to management on a broad range of information security standards and best practices, such as ISO 17799, CobiT and ITIL. • Provide strategic and tactical security guidance for IT projects, including the evaluation and recommendation of technical controls. • Liaise between the information security team and internal audit, legal and HR management teams as required. • Create and facilitate the information security risk assessment process, including reporting and oversight of remediation efforts to address negative findings. JOB REQUIREMENTS --------------------------------------------------- Requirements and Qualifications • Bachelor of Science degree or related business discipline. Professional certification, such as a CISSP, CISM, CISA or other information security credentials is preferred. • SAP authorization management experience. • General knowledge of business processes within finance, sales, marketing and manufacturing. • Ability to adapt to changing technology and apply it to business needs. • Project management experience. • Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences. • Occasional travel. Characteristics • Strong communications and analytical skills. • Knowledge of technological trends and developments in the area of information security and risk management. • Respected leader and team player Salary: $100K-$120K + Bonus CONTACT --------------------------------------------------- If qualified, please submit a Word Version Resume to: John Ahn: [email protected] Alta Associates, Inc John Ahn Senior Recruiter [email protected] --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs