Hi,
*Please send resumes with candidate contact number** **and bill rate ASAP.** **We will get back to you if your profile is a good match. Please don’t send me profile if not exact match.* * * Position : Senior Consultant 1 - *IT Security Auditor* Location : Petersburg, VA Duration : 6 Months **Only IN-PERSON interviews will be conducted - No initial phone interviews will be performed.* . This project has a deadline of Sept 30, 2009. **Only IN-PERSON interviews will be conducted - No intial phone interviews will be performed, therefore your candidate MUST be available for in-person if interest is expressed. PLS communicate this to your candidate and set this expectation prior to submittal. *If they can't/won't do in-person without the initial phn interview first, pls don't submit them. I will ask this question when I screen them.* Client is seeking a qualified resource to perform and/or assist with conducting IT security audits of sensitive IT systems for compliance with COV ITRM IT Security Policy SEC500-02 and ITRM IT Security Standard SEC501-01 on required components (to include but not limited to Risk Management, Facilities Security, and Personnel Security) across approximately 30 sensitive systems. It will be part of this Auditor's job to prioritize/coordinate this project from initial planning to final phases of completion. Candidate will not only be responsible for performing the survey phase, developing an audit program, drafting findings/recommendations, and creating draft reports but will also be responsible for testing of internal controls and assisting with other related (IT Audit Security) projects as needed Candidate should possess the following qualifications: - Possession of CISA preferred, will consider CIA and CPA credentials (with IT Security exp). *One or more of these certifications is REQUIRED pls list which specific cert (of those listed) your candidate currently possesses. *They will not be considered if they do not possess at least 1 of the certs listed *. - Graduate of an accredited college or university with major studies in auditing and/or information systems (name of institution must be on the resume). - 3 to 5 years of recent IT audit experience, preferably in a government and/or university environment with emphasis in conducting security audits in the areas of risk management, contingency planning, system security, data protection, facilities security, pesonnel security, threat management, and/or asset management. *Professional references confirming successful past security audit projects will be required - Be able to conduct IT security audits from survey through reporting phases with general supervisory guidance, and document findings. - Familiarity with the Commonwealth of Virginia VITA security policies and standards (ITRM Policy SEC500-02: IT Information Security Policy; ITRM Standard SEC501-01: IT Information Security Standard; and SEC502-00: IT Security Audit Standard). *Pls forward the link provided under Qquestion #1 (below) so they can familarize themselves with VITA securitiy policies/standards if they are not already. - Knowledge, understanding, and experience with COBIT framework -Familiarity with pertinent industry information technology guidelines and standards (e.g., NIST, ISO, GTAG). Pls list which of these your candidate is familiar with/used in past Employment is contingent upon passing a National Criminal background check and the University will initiate fingerprinting for the chosen candidate. Local candidates are preferred. References where candidate performed previous (similar) audits will be requested. Required / Desired Skills Skill Required / Desired Amount of Experience Possession of CISA preferred, will consider CIA and CPA credentials Required 5 Years Graduate of an accredited college or university with major studies Required 5 Years 3 to 5 years of recent IT audit exp (government or university setting pref) Required 5 Years Conduct IT security audits from survey through reporting phases Required 5 Years Working knowledge w/ ITRM SEC500-02: IT Security Policy Desired 3 Years Working knowledge w/ ITRM SEC501-01: IT Security Standard Desired 3 Years Working knowledge w/ ITRM SEC502-00: IT Security Audit Standard Desired 3 Years Knowledge, understanding, and experience with COBIT framework Highly desired 5 Years Familiarity with pertinent industry IT guidelines (NIST, ISO, GTAG) Highly desired 5 Years Thanks and Regards Pramod Kumar/Abhi Recruitment and Resource Management Virtusoft Inc [email protected] 617-264-0974 Tel 877-570-0923 Fax www.virtusoft.us --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "DIRECT CLIENT IT NEED" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/direct-client-it-need?hl=en -~----------~----~----~----~------~----~------~--~---
