Hai Everyone, I have a new requirement for a Security Enterprise Architect Austin, TX that I thought you might be interested in.
Contract length – September 2011 Rate - Open If you are interested please complete the attached forms required by the state. Forms B & C need to be completed and returned to me in Word format. It is very important to *enter comments* that relate your experience to the skills even if the information is already in your resume. They often use Form C as their first pass through applications. I will also need: · hourly rate · resume in Word format ** *Please do not send me just a resume – if you have a good candidate I will need their skills matrix before I can accurately evaluate them.* ** The Enterprise Architect will perform complex systems analysis work on assigned Information Security project to oversee the Federal Information Security Management Act (FISMA) Certification and Accreditation (C&A) process to obtain an Authority To Operate (ATO) in support of the Texas Workforce Commission Unemployment Insurance and Regulation Division UI System. *Specific Duties Include: * ** 1) Project management of the TWC’s FISMA compliance activities, including boundary formation, scoping, timeline development, and milestone identification. 2) Plan of Action and Milestones (POA&M) development, management and maintenance including documentation of POA&M items, timeline development, remediation/mitigation project management, and POA&M revision. 3) Security Plan revision to document improvements in TWC’s controls and control evidence in support of FISMA compliance. 4) Management and direction for any necessary Security Testing and Evaluation (ST&E) of operational controls, including development of analysis methodology but not performance controls testing (which shall be performed by TWC operational personnel). 5) Recommended improvements in the configuration management review program, methodology, and criteria. 6) Recommended improvements in the Incident Response (IR) management methodology, IR oversight and investigation, and upstream reporting. ** *Additional Requirements: * This position requires thorough knowledge of the security common body of knowledge; experience in security program development and management; proven experience in FISMA C&A process management; working knowledge of the National Institute of Standards and Technology's (NIST) Special Publication 800 Series and supporting Federal Information Processing Standards (FIPS); a broad understanding, and have practical experience, in security analysis methodologies, policy/procedure analysis, business process analysis, risk assessment, technical and physical component evaluation, and interview-based evaluation; project management experience; experience in the development of policies, procedures, security plans, risk management plans, control review plans and incident response programs. Position applicant should have CISSP, CISA certifications – preferred to also have CISM and any NSA Information Security certifications. Required Skills: · General IT Security Experience · Conducting IT Security Audits and IT General Computer Control (ITGCC) Audits · IT Security Program Development and Management Experience · Developing IT Security Plans, Policies and Procedures for Large Enterprises · Conducting IT Security Related Risk Assessments · Working with FISMA and NIST Special Publication 800 Series and supporting Federal Information Processing Standards (FIPS) · Specific Experience Assisting in Certifying Security Controls to Achieve FISMA compliance and creating documentation packages for federal government systems using NIST 800 standards to certify security controls in preparation for system accreditation (C&A). · Developing Incident Response Programs · Has CISSP (Certified Information Systems Security Professional) certification · Has CISA (Certified Information Systems Auditor) certification -- Thanks & Regards, Tommy jibin Technical Recruiter Ibis Tech International. 906 Lacey Avenue Suite 106 Lisle; Illinois: 60532 Ph: 630 929 5198 Fax: 630-969-2722 [email protected] [email protected] www.ibisint.com -- You received this message because you are subscribed to the Google Groups "KNOW.IT" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/know_it_az?hl=en.
