Beschreibung
I am looking for an expert in Security Risk & Governance. you will be responsible for assessing threat and risk, developing best practices and security policies (hardening, vulnerability, SDLC ), and managing the technical vision and implementation of client security measures. Reviews information security policies, standards, and procedures on an annual basis and updates as needed. Review Data classification and propose an access control model for CDM. Develops SOA security processes to apply best practices and ensure compliance with applicable client SOA policies. Provides subject matter expertise on IT and business-related initiatives regarding risk and cybersecurity.
Please apply for this position if you meet the following criteria:
-
In-depth knowledge of information security and implementing an information security program.
-
Knowledge of information security issues related to Air Traffic Management (ATM) and Air Information Management (AIM) control systems.
-
Knowledge of IT governance protocols and current trends.
-
Knowledge of information management assurance and security.
-
Ability to assess risks and implement appropriate controls to mitigate the risks.
-
Familiarity with external/internal attack and penetration assessments, information security risk assessments, security vulnerability assessments, IT audit assessments, network server and application security assessments, security policy standards & procedure development.
-
Knowledge of industry standard risk, governance, and security best practices relevant to local and wide area networking, Internet security, applications security architectures, etc..
-
In-depth knowledge of ISO-20001 and ISO-27002 and NIST Cyber security frameworks.