Manages the development and delivery of IT security standards best practices architecture and systems to ensure information system security across the enterprise.
*Candidate MUST be local to Metro Atlanta*
*Tax Clearance Letter due at the time of submission* (pls review compliance tab for instruction on how the CANDIDATE must obtain this letter)
*Contract to Hire w/ Benefits*
The Georgia Department of Revenue isseeking an Information Technology Security Manager to be a lead member of theInformation Security team. This position will report directly to the ChiefInformation Security Officer and be responsible for directing subordinatesupervisors and staff in the development and delivery of IT security standardsand best practices.
TheITSM will performs two core functions for the Department.
Thefirst is overseeing the operations of the of the Security Operations Center(SOC) and security analysts. The second is supporting the Compliance team inmaintaining and establishing a stronger security stance through policy architectureand training processes. Secondary tasks will include assisting in the selectionof appropriate security solutions and oversight of any vulnerability auditsand assessments.
TheIT SM is expected to interface with peers in the Systems and Networkdepartments as well as with the leaders of the business units to both share thecorporate security vision with those individuals and to solicit theirinvolvement in achieving higher levels of enterprise security throughinformation sharing and cooperation.
Responsibilitiesincluded but are not limited to:
Overseeingthe deployment integration and initial configuration of all new securitysolutions and of any enhancements to existing security solutions in accordancewith standard best operating procedures generically and the enterprise ssecurity documents specifically.
Creatingand maintaining the department s security architecture design.
Workingwith our InfoSec Compliance team to create and maintain the department sBusiness Continuity Plan and Disaster Recovery Plan where appropriate.
Implementingprocesses and methods for auditing and addressing information securitystandards noncompliance to acceptable compliant environments.
Providingsupport in maintaining the department s security awareness training program.
Conductingstudies within and outside the organization to ensure compliance with industryand security standards and best practices.
Managingand participating in the planning and implementation of security administrationfor all IT projects and responsible for evaluation and selection of securityapplications & systems.
Makingrecommendations and assisting in the implementation of changes to work methodsand procedures to make them more effective or to strengthen security measures.
ContinuingInfoSec s efforts to maintain security documents such as policies standards baselines guidelines andprocedures.
Experience with security andtechnology tools such as SIEMtools i.e. Splunk or endpoint security and threat intelligence tools.
Supervise all investigations intoproblematic activity and provide ongoing communication with the CISO andInfoSec team.
Supervise the design and executionof vulnerability assessments penetration tests and security audits.
DOR will conduct a background check on all candidates considered for the position. Individuals must be compliant with Georgia tax obligations.
Individuals having any overdue and unpaid taxes or any felony convictions (no matter how long ago) will not be offered the position or hired.
All employees will be fingerprinted.Required/Desired Skills
Skill | Required /Desired | Amount | of Experience |
---|
Bachelor s degree in computer science or information technology | Required | 0 | |
Systems and Network Security experience | Required | 5 | Years |
IT Security experience | Required | 5 | Years |
Management experience. | Required | 2 | Years |
AWS experience performing security reviews/security assessments of applications and infrastructure | Required | 5 | Years |
Industry certifications: CISSP CompTIA Security or AWS Certified Security (MUST UPLOAD CERTIFICATIONS) | Required | 0 | |
Technical knowledge of developing managing information security disaster recover software and database protection | Highly desired | 0 | |
Leadership experience managing multiple large cross functional teams or projects and working with senior level management | Highly desired | 0 | |
Experience or knowledge in Motor Vehicle/Tax Industry | Highly desired | 0 | |
Questions
No. | Question |
---|
Question1 | Absences greater than two weeks MUST be approved by CAI management in advance and contact information must be provided to CAI so that the resource can be reached during his or her absence. The Client has the right to dismiss the resource if he or she does not return to work by the agreed upon date. Do you accept this requirement |
Question2 | Please list candidates email address. |
Question3 | Candidate must be paid AT LEAST $$$ if selected for engagement. Candidate can be paid more; however the SRP rate cannot $$$$$$. Do you accept this requirement |
Question4 | The maximum markup for this engagement s SRP rate is 35%. To be competitive on pricing a markup below the 35% threshold is suggested. Do you agree to propose a markup at or below 35% |
Question5 | This assignment is contingent upon customer renewal and availability of adequate funding. Do you accept this requirement |
Question6 | The selected candidate will be expected to start their engagement no later than 2 weeks (10 business days) from the client s selection date. Do you accept this requirement |
Question7 | What city does the candidate reside in |
Question8 | HYBRID work option: However the selected candidate must be available to report onsite as directed by the client. Do you accept this requirement |
Employment Type
Full Time
Disclaimer:
Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via
contact us page.