Sign upLog in

Information Security Architect

Technology Consulting Inc

Frankfort, Kentucky

Apply
JOB DETAILS
JOB TYPE
Contractor
SKILLS
Analysis Skills, Authentication, Best Practices, Business Case, CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Computer Science, Computer Security, Control Objectives for Information and related Technology (COBIT), Cryptography, DevOps, Employee Orientation, Endpoint Security, Enterprise Architecture, FISMA - Federal Information Security Management Act, Firewalls, Forensic Science, Government, ISO (International Organization for Standardization), ITIL (IT Infrastructure Library), Identify Issues, Identity Data Management, Incident Response, Information Architecture, Information Assets, Information/Data Security (InfoSec), Internal Audit, Intrusion Detection Systems, Intrusion Detection and Prevention (IDP), Metrics, Microsoft Excel, Microsoft Outlook, Microsoft Word, Operational Support, Operations Management, Performance Metrics, Policy Development, Procedure Development, Risk Analysis, Risk Management, Root Cause Analysis, Secure Coding, Security Analysis, Security Architecture, Security Design, Security Infrastructure, Security Monitoring, Security Policy, Staff Training, Strategic Planning, System Integration (SI), Systems Administration/Management, Systems Analysis, Systems Maintenance, Threat Modeling, Training Program, Training/Teaching, U.S. National Institute of Standards and Technology (NIST), United States Citizen, United States Department of Defense (DoD), Validation Testing
QUALIFICATIONS
LOCATION
Frankfort, Kentucky
POSTED
4 days ago
TCI has an immediate need for aRemoteInformation Security Analyst in Frankfort, KY.This is not a C2C opportunity. This is a long-term contract opportunity with probability of extensions.

NOTE: This position requires US Citizenship.

SUMMARY

The Information Security Architect will serve as the principal security advisor for planning, designing, implementing, maintaining, and analyzing systems. As the Subject Matter Expert (SME) for all security operations, you will guide internal developers and vendor partners on security strategy and requirements. Your role will be instrumental in analyzing the current state of the security program, designing future plans and guidelines, and creating implementation roadmaps to enhance security posture. Additionally, you will play a crucial role in designing, implementing, and maintaining robust security solutions to protect our organization's sensitive information and assets. Collaboration with various teams to assess security risks, develop strategies, and implement controls to mitigate threats effectively will be essential. This role requires a deep understanding of security principles, technologies, and industry best practices.

REQUIREMENTS
  • Analyze the current state of the Client's security program and design future states, creating a roadmap for implementation.
  • Develop a business case and key performance indicators (KPIs) and socialize the security program within the Division.
  • Security Policy Management: Assess, manage, and improve security policies and procedures to align with industry best practices and organizational objectives.
  • Advise on security decisions and direction based on the Division's vision and mission.
  • Collaboration and Strategy Development: Collaborate with other Division Architects and the Security Operations Manager to develop global security strategies based on industry best practices.
  • Advise on security decisions and direction based on a deep understanding of the Division's vision and mission.
  • Security Architecture Development: Develop and maintain a security architecture process aligned with business and technology drivers.
  • Create security strategy plans and roadmaps based on enterprise architecture practices.
  • Security Standards and Procedures: Draft security procedures and standards for executive management approval or authorization by theCISO
  • Determine baseline security configuration standards for operating systems, network segmentation, and identity and access management.
  • Risk Assessment and Response: Perform risk assessments, advise on risk response strategies, and identify security issues from system integration.
  • Conduct or facilitate threat modeling of services and applications to mitigate associated risks.
  • Collaboration and Coordination: Coordinate with DevOps teams to advocate secure coding practices and escalate concerns about poor coding practices.
  • Liaise with privacy and compliance officers to document data flows of sensitive information and recommend appropriate controls.\
  • Security Operations Support: Support internal security controls testing and validation as directed by the CISO or internal audit team.
  • Review security technologies, tools, and services and recommend their use based on security metrics.
  • Security Infrastructure Implementation: Evaluate, select, and implement security technologies, tools, and solutions to enhance the organization's security posture.
  • Configure and deploy security infrastructure components such as firewalls, intrusion detection/prevention systems, endpoint protection, encryption, and authentication mechanisms.
  • Incident Response and Forensics: Develop incident response plans and procedures to mitigate security incidents effectively
  • Conduct post-incident analysis and forensic investigations to identify root causes and prevent future occurrences.
  • Security Awareness and Training: Develop and deliver security awareness training programs to educate employees on security risks and best practices.
  • Provide ongoing support and guidance to staff regarding security-related inquiries and concerns.
REQUIREMENTS
  • Bachelor’s degree in computer science, Information Security, or related field; advanced degree preferred.
  • Proven experience (5+ years) in information security architecture, design, and implementation.
  • Candidateswithoneormoreofthefollowingcertificationsareaplus: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), or other relevant certifications preferred.
  • Understanding of FISMA, FedRamp, ISO 27001, COBIT NIST and ITIL.
  • Maintainingsecurity,assessing andevaluatingsecurity,anddoingsecurity incidentforensicwork.Knowledgeofvendorsandtheir products,including:
  • ExperiencewithGovernmentagencies,particularlytheDepartmentofDefense(DoD) oninformationsecurity matters. Experience with Government Classified systems and the associated security requirements.
  • ProficiencyinMicrosoftOfficeSuite(Word,Excel,Outlook,etc.)
  • Innovativeandcreativemindset
  • Basicnetworksecurity knowledge(generalprinciples)
  • Excellentdocumentationandcommunicationskills.
  • Abilitytoorganizetasksintomilestonesandsuccessfullyexecute toprojectcompletion.

About the Company

T

Technology Consulting Inc

Since 1988, Technology Consulting Inc. has provided information systems and consulting services to a variety of organizations across the United States. We concentrate on IT staffing with deep roots in government contract opportunities across all technology platforms. Our team is committed to aligning leading edge knowledge of information systems, processes and people to ensure practical success along with customer satisfaction. Whether you are a skilled professional looking for your next career or an organization in need of experienced talent, we can help!

COMPANY SIZE
100 to 499 employees
INDUSTRY
["Information Security / Assurance"]
FOUNDED
1988
WEBSITE
https://careers.tcipro.com

Resume Resources

Free Resume TemplatesFree Resume Builder