Description
We are seeking Information Security Analyst for 3 month contract position in Atlanta, GA
Skills :
5+ years in Information Security or Compliance related services, IT audit, Internal Audit and/or Risk Management Experience. Knowledge of the healthcare and software industries is a plus.
4-year degree in computer science or related field or equivalent experience. Hold
CISA, CISSP, GIAC or other similar professional designations
Understanding of HIPAA-HITECH, PCI, HITRUST, ISO 27001, SOX, etc.
Understanding of security controls for Windows Servers/workstations, Unix, Linux; Oracle
Familiarity with security controls relating to McAfee ePO, RSA Envision SIEM, Tenable Nessus vulnerability and configuration scanner, WebInspect, Firewalls, DLP, or similar products/technologies.
Knowledge of system, network, and architecture security best practices
Strong interpersonal skills to build/maintain ongoing business relationships
Able to handle moderate to complex resolution without escalation and with minimal supervision.
Able to exercise professional judgment within defined procedures
Experience in Risk Assessment, audit, and IT security assessments
Familiar with healthcare and financial compliance regulations and IT and security frameworks and standards
Responsibilities :
Provide gap analysis between security policies/standards/regulations and practices, processes, and solutions; recommend actions to ITRL.
Assist ITRL in establishing, documenting, and managing processes and supporting tools used to accomplish IT compliance with regulatory and best practice security and compliance frameworks (eg HIPAA-HITECH, PCI PA-DSS & PCI-DSS, HITRUST, ISO 27001, SOX, etc.)
Work with business and IT owners to establish priorities for process improvements to mitigate risk
Analyze the company's data protection needs with Applications Developers and ensure secure solutions and process improvements are implemented.
Execute problem determination and resolution for security related problems
Help ITRL coordinate with Business Units and Corporate functions in the event of incidents or breaches
Train and assist security administration functions when necessary.
Interact with other IT Staff/Business Leads in meetings in understanding security issues and discuss solutions.
Help with records management and metrics reporting regarding security and compliance data using the Archer Governance Risk & Compliance (GRC) and other tools as appropriate.
Develop and maintain disaster recovery documentation and ensure associated processes meet business requirements.
Assist with threat & vulnerability management process and tools
Prepare automated and ad hoc reports and/or interpret data from various security sources (eg McAfee ePO, RSA Envision SIEM, Tenable Nessus vulnerability and configuration scanner, WebInspect, data loss prevention (DLP), etc.)
Assist with application data inventory, mapping, and development of data flow process documentation
Support ITRL in responding to 3rd party requests and monitoring critical vendors
Support training and awareness efforts in the business units
Monitor and provide project management support for business unit implementation of security technology and remediation measures
Monitor and or administer appropriate access and policies for security systems
Consult and apply applicable encryption methods
Interested candidates should send a copy of their Resume including salary/rate information or apply at our website
Company Profile:
Synergy America, Inc is a 16-year-old Professional Services staffing firm providing contract, contract-to-hire and direct-hire resources to companies looking for key individuals. We specialize in providing top-notch talent for our clients, and help candidates in finding the right position.
We rely on our knowledge of search and hiring procedures. We consider both the companies and the candidates to be our clients. We believe in providing the highest level of service to our clients at all times.