Hello. If you have any profiles matching the below requirement, kindly send it to * [email protected]*
* * *Position:* Application Security Expert *Location:* Albany, NY *Duration:* 6+ Months *Rate:* Open This person needs to be highly certified, and skilled at the following: Working with apps in a health care setting for patients, particularly apps that allow for consumers to input data directly. Person must be able to accurately and quickly assess correct authentication, credentials and sign on procedures for such functionality with end patients. Consultant should be Oracle and Microsoft savvy with ClearTrust RSA knowledge. A PHD is a nice to have. Also, security certifications such as CISSP and ISC2 are highly sought after in this person. PMI Cert is only nice to have, not necessary. Work to be done all on site. Manager wants to ensure that if they build new consumer data entry functionality that if there is a data breach that it will not be due to a technology failure. 1. Develop, implement and manage an information risk management framework and metrics for security processes throughout New York State Office of Mental Health incorporating technology and security policy, as well as regulatory and industry compliance (e.g. HIPAA, HITECH, PCI DSS, CSCIC, OFT and other government regulations). 2. Perform gap analysis against regulatory and industry compliance, and implement and monitor information security policies and procedures to remediate gaps. 3. Oversee the design, implementation, and maintenance of security and privacy controls to safeguard information assets, intellectual property and computer systems; resolved potential issues as needed. 4. Research and/or develop technology solutions and processes that allow secure access to information assets, e.g. architecture for authentication and access control, data loss prevention, data privacy, digital signature, vulnerability management and security events and incident management technologies. 5. Respond to incidents, intrusion detection, security advisories, investigations and other security-related operational issues by providing guidance and recommending policy. 6. Perform information security and privacy risk assessments identifying areas of risk and implement immediate and long-term corrective actions. 7. Participate in the system development cycle to ensure that security issues were taken into account and provided security consulting to major applications initiatives by identifying risks and system needs, defining requirements and solutions to help drive new applications, products and services. 8. Coordinate information security training and awareness for employees, contractors, partners, and other third parties. 9. Lead audit preparation effort and interface with internal and external audit, as well as regulatory agencies. 10. Monitor changes in legislation and accreditation standards that affect information security. 11. Interface with senior management as necessary, providing reports, presentations, and recommendations covering the operational aspects of information risk management, compliance, security and privacy. 12. Manage the development, implementation, and maintenance of technology risk management policies and programs in partnership with the senior IT and business leadership. 13. Conduct risk assessments, penetration tests and gap analysis to assess the risk and security of critical information assets, and develop security crisis and response solutions that helped maintain and improve privacy, security and compliance to applicable rules and regulations, e.g. CSCIC, OFT and other government regulations. 14. Develop metrics and trend analysis to measure, monitor and report on the effectiveness of existing controls. 15. Report to senior management on analysis, exceptions, problem areas and trends of risk-related issues including status of information security and confidentiality conditions, providing practical recommendations for remediation. 16. Establish security standards and baselines on various technologies for technical, administrative and development staff, e.g. Windows, UNIX (various flavors), CISCO routers, Juniper firewalls, and Oracle database. 17. Perform network and application reviews to determine the potential risks associated with the operating system, network infrastructure, application, and assess compliance towards corporate policies. 18. Develop an approach for tracking mitigation activities and measuring residual risk over time. 19. Manage security incidents and events to protect corporate IT assets, including intellectual property, fixed assets and the company's reputation. 20. Evaluate the effectiveness, efficiency and compliance with existing information security control measures and enforcement mechanisms. 21. Establish, communicate, implement and maintain information security policy, standards, and security awareness that supported business goals and objectives. 22. Develop training materials on information security for employees and all other authorized users. 23. Develop and implement incident reporting and incident response processes and procedures to address security incident/breach, violation of policy or complaint; serve as the point of contact for all information security inquiries and audits. 24. Monitor and ensure compliance with security legislation, regulations, advisories, alerts and vulnerabilities, and communicated accordingly with IT divisions, data owners and executive management. * * *Thank you for your time and have a great day!* * * *Regards**,* * * *Swathi Madhuri* *Technical Recruiter* *Aim Computer Consulting N. Laurel Park Drive, Suite #513, Livonia, MI 48152 **[email protected]* <[email protected]>** *[email protected]* <[email protected]> [email protected]** http://www.linkedin.com/in/swathimadhuri To unsubscribe from this group, send email to tek-professionals+unsubscribegooglegroups.com or reply to this email with the words "REMOVE ME" as the subject.
