-------- Forwarded Message --------
From: Robin Mills - Search EDP Inc. <rmills@searchedp.com>
To: joec@idsi.net
Subject: Information Security Analyst - Bronx, NY
Date: Fri, 13 May 2011 16:06:20 -0400
Dear Joseph,
We are seeking an Information Security Analyst (Full-time) for our client, a major healthcare organization in the Bronx, NY area.
Responsibilities will include, but are not limited to:
* Serves as an internal information security analyst to the organization, responsible for implementing, managing and enforcing information security directives and compliance as mandated by HIPAA, the Hi-Tec Act and any other applicable laws and regulations.
* Documents security policies and procedures.
* Performs ongoing information risk assessments and audits to ensure that information systems are adequately protected to meet HIPAA certification and other technical security requirements. Develops and implements policies and procedures to mitigate identified risks.
* Leads and manages information security awareness and training initiatives.
* Monitors compliance with information security policies and procedures, referring problems to appropriate management.
* Ensures that the access control, disaster recovery, business continuity, incident response and risk management needs of the organization are properly addressed.
* Leads an incident response team to investigate and contain information security breaches. Develops remediation plans resulting from such investigations.
* Manages the Business Continuity Program, develops and maintains appropriate documentation of the program. Coordinates Business Continuity efforts with internal partners, and participates in the development and execution of periodic Disaster Recovery and Business Continuity testing.
* Performs other duties as necessary or assigned.
Requirements:
* Bachelor's Degree in Information Systems, Computer Science, Business Administration, Health Information Management, related field or equivalent knowledge.
* Minimum 7 years experience in information technology, with at least 5 years in information security. Previous experience within the healthcare-related organization is required. In-depth knowledge of the HIPAA Security Rule and Hi-Tech Act.
* CISSP (Certified Information Systems Security Professional) certification, CISA and/or GIAC certification strongly preferred.
* Strong technical skills including application and operating system hardening, vulnerability assessments, security audits, intrusion detection / prevention, data-leak protection, firewalls, networking, VPN, encryption, etc.
* Previous experience in business continuity and disaster recovery planning in a corporate environment.
* Project management experience is preferred.
* Strong oral and written skills, and highly developed quantitative and qualitative analytical skills required to understand business processes and functions, compile and interpret appropriate data, and identify and solve problems.
Salary: $90,000 - $95,000
If you are qualified, available, interested, or planning to make a change, please reply to this e-mail with a copy of your latest resume, even if we have spoken recently about a different position. If you do respond via e-mail please include a daytime phone number so I can reach you. In considering candidates, time is of the essence, so please respond ASAP. Thank you.
If you are not currently seeking employment and know an Information Security Analyst who may be, please feel free to forward my email to them or email me with their contact information. I will contact them directly.
Thanks much,
Robin E. Mills
Technical Recruiter
Search EDP Inc.
RMills@SearchEDP.com
'Be kinder than necessary, because everyone you meet is fighting some kind of battle.'
