Security Compliance Specialist

Covestic is a leader in supplying technology and management consulting services to service provider and enterprise companies. Covestic continually partners with clients to achieve business and organizational goals through efficient and innovative solutions. We are preparing a project team for a March 2006 ramp that will provide leadership on several concurrent projects implementing information security controls and processes for a leading US technology corporation. This is an unique opportunity to work as part of a team to help implement a security program that is aligned with industry best practices. The position involves taking audit results and helping design solutions to address the identified issues. The project's goal is to successfully meet the compliance objectives by implementing specific security controls. This role will involve the review of gaps identified during an initial assessment and comparing them against specific control objectives. A solid security background is needed to be able to review and implement both technical and process controls. Successful candidates will have the ability to prepare concise written reports at the engineering, management, and executive levels.

- I.T. security audit/assessment experience - I.T. security control design and implementation - Experience writing and reviewing security policies and procedures - Knowledgeable in network and operating systems security - Experience with security around business processes - Experience in developing security process training and knowledge transfer Desired Qualifications: - BA/BS in information technology or related field - CISA, CISSP, CISM, SSCP, GIAC - Sarbanes-Oxley experience is a plus - Microsoft, Solaris, HP-UX, Open BSD, RedHat - Experience using security assessment/management tools (Qualys, nMap, ISS, ESM) - 5 + years of information security experience