Showing posts with label CISSP. Show all posts
Showing posts with label CISSP. Show all posts

Wednesday, 9 November 2011

Security Specialist

Zylog delivers top jobs to top talent. We are currently seeking experienced professionals for exciting new opportunities and career advancement.  Zylog represents hundreds of client companies for both contract and permanent positions. New jobs are being filled every day and our experienced professional resource managers are waiting to help you screen the top jobs that match your skills and experience. You don’t have time to search long lists of postings repeated on multiple web sites, so let our trained and experienced resource managers do the work for you. We review top jobs and will be the first to alert you when the right opportunity arises.


Job Description:
Our client has a requirement for Security Specialist for a 13 months Contract opportunity.  The positions are located in Calgary, Alberta


What makes this Special:
Our client has a prestigious reputation and excellent work environment. This position offers an opportunity for personal learning and to contribute to important initiatives that make a difference. Our client is actively screening resumes and scheduling interviews to fill this position, so let one our professional resource managers represent you to the client, promote your skills, and help you prepare.


Job Description:
As part of this team, we are looking for a well-rounded security professional to assist in a very dynamic, demanding environment.


Technical Skills / Business Knowledge needed: 
  • Network level controls (routers, switches, firewalls, VPN concentrators)         
  • Host level controls (Windows/Unix servers, Windows XP & 7)              
  • Security controls (network intrusion detecting/prevention, web content filtering, vulnerability scanning, patch management)              
  • Security Event Management (event logging, correlation, analysis and response)              
  • Security Risk Management  


Qualified Candidates will have:
  •   Security certification such as CISSP, CISM and SANS certifications desired
  • Strong team player
  • Strong, efficient & effective communication skill set
  • Application security knowledge (web servers (Apache and IIS) and databases (Sybase, MS SQL and Oracle) would be an asset
  • Strong identity access management knowledge
·   Experience in SOX, NERC-CIP regulatory compliance would be an asset

Keywords:   Routers, VPN, CISSP, Security Risk     


How to Apply:
Online:
To apply for this and other suitable exciting opportunities with Zylog Systems (Canada) Ltd., you can register and apply online at www.ZylogCanada.com

Email:
If you would like to email a copy of your resume for review, please reference this posted Job Number or Job Description in the subject line of your email for prompt identification and send your email with attached resume to resumes@zylog.ca


Company Overview:
Zylog is internationally ranked within the top 100 Global Recruitment Industry and one of the top three IT Professional Staffing Firms in Canada.  Zylog provides consulting services, software development, application migration, and recruiting services for permanent and contract positions. Zylog is a Microsoft Gold Certified Partner, HP Alliance One Partner, Telus Business Solutions Partner, Oracle Partner, and proudly represents Fortune 500, Government, Banking, Healthcare and IT organizations globally. Zylog leverages ISO 9001:2000 certified processes, industry best practices, and ownership of one of the largest professional talent databases in Canada. We are dedicated to the progress of our clients, consultants, and our community. Apply now or contact one of our experienced professional resource managers to help you find the perfect career to make the most of your unique skills and experience.


Top Jobs for Top Talent

Zylog Systems (Canada) Ltd.

Monday, 26 September 2011

Security, Privacy & Risk Management Consultant / L3

Zylog delivers top jobs to top talent. We are currently seeking experienced professionals for exciting new opportunities and career advancement.
Zylog represents hundreds of client companies for both contract and permanent positions. New jobs are being filled every day and our experienced professional resource managers are waiting to help you screen the top jobs that match your skills and experience.
You don’t have time to search long lists of postings repeated on multiple web sites, so let our trained and experienced resource managers do the work for you. We review top jobs and will be the first to alert you when the right opportunity arises.


Job Description:
Our client has a requirement for Security, Privacy & Risk Management Consultant / L3 for a 6 month opportunity.  The position is located in Toronto.


What makes this Special:
Our client has a prestigious reputation and excellent work environment. This position offers an opportunity for personal learning and to contribute to important initiatives that make a difference. Our client is actively screening resumes and scheduling interviews to fill this position, so let one our professional resource managers represent you to the client, promote your skills, and help you prepare.


Requirement or Qualifications:

The services and deliverables to be provided will include the following:
  • Guide and develop  privacy management processes, implementation guidelines and procedures,  including Consent Management Framework for health care provisioning,
  • Develop Privacy Programs and Privacy and Security Incident Management Process for health care solution provisioning
  • Develop & implement the audit management program/framework for Health information use.
  • Develop privacy and security training necessary for Health Care System usage and deployment.
  • Conduct Threat Risk Assessment and Privacy Impact Assessments for healthcare systems
  • Conduct vulnerability assessment and security analysis.
  • Support healthcare applications to comply with security best practice & privacy (PHIPA - 10 privacy principle).
  • Deliver Security and Privacy requirements and recommendations to stakeholders.
  • Advise the project team of recommended approaches for executing and promoting security and privacy practices.
  • Provide Security Architecture Consulting and help build appropriate security controls, while developing or deploying of technology and business solutions.
  • Work with user groups to provide security and privacy awareness and ensure a successful knowledge transfer occurs with technical support, application support and business users.
  • Maintain collaborative & productive working relations with both strategic & operational elements.
  • Develop and maintain communication on the status of the project.
  • Work collaboratively with both the business and technical project teams to ensure that Privacy and Security requirements are understood and met.
  • Develop and present security and Privacy Policies
  • Improve privacy management program to comply with Information Privacy Commissioner ofOntario’s expectation.

Qualifications, knowledge, skills, abilities:
  • Certification such as CIPP/C, CIPP/IT, CISSP, CRISC etc.
  • Strong experience developing privacy management processes in health care
  • Experience conducting Threat Risk Assessment and Privacy Impact Assessment for healthcare solutions and projects in Ontario.
  • Extensive knowledge of developing information security, privacy and risk management polices and procedures.
  • Strong technical skills related to performing vulnerability assessment and web security analysis.
  • Extensive experience with Privacy Legislation including PHIPA, FIPPA, PIPEDA and Security Standards and Best Practices.
  • Must have practical working knowledge of privacy and security regulations, trends and issues, including; an understanding of their impact on business and IT operations, as well as skill with interpretation and communication of regulations and compliance requirements.

Nice to Have:
  • Technical Writing skills
  • Experience with Enterprise Architecture principals including server optimization and associated security controls.

Keywords:  CIPP/C, CIPP/IT, CISSP, CRISC, Security Threat Risk Assessment


How to Apply:
Online:
To apply for this and other suitable exciting opportunities with Zylog Systems (Canada) Ltd., you can register and apply online at http://www.zylogcanada.com/

Email:
If you would like to email a copy of your resume for review, please reference this posted Job Number or Job Description in the subject line of your email for prompt identification and send your email with attached resume to resumes@zylog.ca


Company Overview:
Zylog is internationally ranked within the top 100 Global Recruitment Industry and one of the top three IT Professional Staffing Firms in Canada. Zylog provides consulting services, software development, application migration, and recruiting services for permanent and contract positions. Zylog is a Microsoft Gold Certified Partner, HP Alliance One Partner, Telus Business Solutions Partner, Oracle Partner, and proudly represents Fortune 500, Government, Banking, Healthcare and IT organizations globally. Zylog leverages ISO 9001:2000 certified processes, industry best practices, and ownership of one of the largest professional talent databases in Canada. We are dedicated to the progress of our clients, consultants, and our community. Apply now or contact one of our experienced professional resource managers to help you find the perfect career to make the most of your unique skills and experience.


Top Jobs for Top Talent

Zylog Systems (Canada) Ltd.

Security, Privacy & Risk Management Consultant / L3

Zylog delivers top jobs to top talent. We are currently seeking experienced professionals for exciting new opportunities and career advancement. Zylog represents hundreds of client companies for both contract and permanent positions. New jobs are being filled every day and our experienced professional resource managers are waiting to help you screen the top jobs that match your skills and experience. You don’t have time to search long lists of postings repeated on multiple web sites, so let our trained and experienced resource managers do the work for you. We review top jobs and will be the first to alert you when the right opportunity arises.

Job Description:
Our client has a requirement for Security, Privacy & Risk Management Consultant / L3 for a 6 month opportunity.  The positions are located in Toronto.

What makes this Special:
Our client has a prestigious reputation and excellent work environment. This position offers an opportunity for personal learning and to contribute to important initiatives that make a difference. Our client is actively screening resumes and scheduling interviews to fill this position, so let one our professional resource managers represent you to the client, promote your skills, and help you prepare.

Requirement or Qualifications:
The services and deliverables to be provided will include the following:
  • Guide and develop  privacy management processes, implementation guidelines and procedures,  including Consent Management Framework for health care provisioning,
  • Develop Privacy Programs and Privacy and Security Incident Management Process for health care solution provisioning
  • Develop & implement the audit management program/framework for Health information use.
  • Develop privacy and security training necessary for Health Care System usage and deployment.
  • Conduct Threat Risk Assessment and Privacy Impact Assessments for Healthcare Systems
  • Conduct vulnerability assessment and security analysis.
  • Support healthcare applications to comply with security best practice & privacy (PHIPA - 10 privacy principle).
  • Deliver Security and Privacy requirements and recommendations to stakeholders.
  • Advise the project team of recommended approaches for executing and promoting security and privacy practices.
  • Provide Security Architecture Consulting and help build appropriate security controls, while developing or deploying of technology and business solutions.
  • Work with user groups to provide security and privacy awareness and ensure a successful knowledge transfer occurs with technical support, application support and business users.
  • Maintain collaborative & productive working relations with both strategic & operational elements.
  • Develop and maintain communication on the status of the project.
  • Work collaboratively with both the business and technical project teams to ensure that Privacy and Security requirements are understood and met.
  • Develop and present security and Privacy Policies
  • Improve privacy management program to comply with Information Privacy Commissioner of Ontario’s expectation.

Qualifications, knowledge, skills and abilities:
  • Certification such as CIPP/C, CIPP/IT, CISSP, CRISC etc.
  • Strong experience developing privacy management processes in health care
  • Experience conducting Threat Risk Assessment and Privacy Impact Assessment for healthcare solutions and projects in Ontario.
  • Extensive knowledge of developing information security, privacy and risk management polices and procedures.
  • Strong technical skills related to performing vulnerability assessment and web security analysis.
  • Extensive experience with Privacy Legislation including PHIPA, FIPPA, PIPEDA and Security Standards and Best Practices.
  • Must have practical working knowledge of privacy and security regulations, trends and issues, including; an understanding of their impact on business and IT operations, as well as skill with interpretation and communication of regulations and compliance requirements.

Nice to have:
  • Technical Writing skills
  • Experience with Enterprise Architecture principals including server optimization and associated security controls.
Keywords:  CIPP/C, CIPP/IT, CISSP, CRISC, Security Threat Risk Assessment

How to Apply:
Online:
To apply for this and other suitable exciting opportunities with Zylog Systems (Canada) Ltd., you can register and apply online at www.ZylogCanada.com
Email:
If you would like to email a copy of your resume for review, please reference this posted Job Number or Job Description in the subject line of your email for prompt identification and send your email with attached resume to resumes@zylog.ca

Company Overview:
Zylog is internationally ranked within the top 100 Global Recruitment Industry and one of the top three IT Professional Staffing Firms in Canada. Zylog provides consulting services, software development, application migration, and recruiting services for permanent and contract positions. Zylog is a Microsoft Gold Certified Partner, HP Alliance One Partner, Telus Business Solutions Partner, Oracle Partner, and proudly represents Fortune 500, Government, Banking, Healthcare and IT organizations globally. Zylog leverages ISO 9001:2000 certified processes, industry best practices, and ownership of one of the largest professional talent databases in Canada. We are dedicated to the progress of our clients, consultants, and our community. Apply now or contact one of our experienced professional resource managers to help you find the perfect career to make the most of your unique skills and experience.

Top Jobs for Top Talent
www.Zylog.ca

Zylog Systems (Canada) Ltd.

Monday, 4 April 2011

Senior IT Auditor, Infrastructure

About the Job


Senior IT Auditor, Infrastructure
 
About the Job

Zylog Systems (Canada) Ltd delivers top jobs to top talent. We are currently sourcing talented IT, Engineering, and Healthcare professionals who are qualified for and interested in exciting new opportunities.
 
Zylog represents hundreds of client companies that are actively seeking top professional talent for both contract and permanent positions with experience in IT, Engineering, Retail, Bank and Finance, Insurance, Oil & Gas, Telecommunications, Government and Health Services. New positions are coming available every day and our experienced professional resource managers are waiting to help you screen the top jobs that match your skills for the best opportunities.
 
You don't have the time to search the long lists on Job Boards everyday to look through all of the postings to find the opportunity that is best for you. Let our trained and experienced resource managers do the work for you. We are reviewing top jobs from Fortune 500, Government, and Healthcare as each opening becomes available. Let us look for new opportunities for you and be the first to alert you when the right opportunity arises.
 
 
Job Description:
 
Our client has a requirement for a Senior IT Auditor, Infrastructure for a 6 month contract opportunity.  The position is located in Toronto. 
 
Department Overview:
The IT Infrastructure Audit team is accountable for conducting technical IT infrastructure audits, major infrastructure technology implementation audits and integrated audits. The Senior Auditor is responsible for the on-time and quality delivery and execution of the annual audit plan.

Accountabilities:
The ideal candidate should have four or more years of hands-on IT audit experience. The IT Infrastructure Audit Team operates in a collaborative, flexible, innovative and learning environment. Therefore the candidate must be able to adapt quickly to changing conditions, be effective in enabling/empowering his/her team-members and consistently re-assess preset goals and objectives with audit management.

Specific Accountabilities include:
Audit Delivery - Ensure audits are completed in accordance with Audit Methodology, on time and within budget and scope parameters. This would include the following:

  • Audit Planning:
    • Contribute to audit planning process by assisting in/leading the development of Audit Planning Memo, Risk & Control Assessment, and audit programs.
  • Fieldwork:
    • Execute audit testing which includes risk assessment, control design and operating effectiveness assessment and the completion of high quality test work papers in a clear, concise, logical manner.
    • Develop and present audit findings and management recommendations on value-added technology control improvements and enhancements.
    • Lead some of the activities during fieldwork as agreed with Audit Manager.
  • Reporting and closure:
    • Assist in drafting audit report/Lead reporting activities as agreed by management.

 
 
Findings Follow-up: Ensure findings follow-up is completed on time and in accordance with TDBFG Audit Methodology while addressing the risks identified. This includes the following:
 
  • Liaise with IT management to monitor progress of open audit findings and provide input where required.
  • Work closely with management on findings closure to proactively identify challenges and gaps.
  • Complete key documents required to close audit findings and perform the required testing including the completion of test work papers.

Other responsibilities include the following:
  • Support a cohesive team and positive work environment that is consistent with TDBFG's Guiding Principles and Leadership Profile while supporting innovation, creativity and collaboration.
  • Support audit management and other team members in the achievement of individual, divisional and team goals.
  • Work with IT Audit Management on internal process improvement initiatives.
  • Contribute to the annual-planning process where required.
  • Keep abreast of emerging risks and trends in information technology.
  • Develop and maintain in-depth understanding of current technology risks to adequately assess their likelihood and impact.
  • Develop and maintain strong working relationships with internal Technology stakeholders.
     


Requirement or Qualifications:
 
Qualified Candidates will have:
 

Qualifications / Skills / Experience:
  • Strong technical IT infrastructure knowledge of at least two key infrastructure areas (e.g. Operating Systems, Databases, Mainframe, Data Centers, etc.).
  • IT audit experience in a large organization, preferably in a financial institution; OR
  • Large scale ( million to $15 million+) system implementation audit experience - minimum 4 years.
  • Strong understanding of inherent technology risks and ability to translate technology residual risks into business language.
  • Strong knowledge on risk assessment processes and methods.
  • Strong personal integrity with high ethical standards and treating people with respect.
  • Excellent report writing skills and strong verbal communication skills.
  • Ability to work effectively in a highly collaborative team environment
  • Strong interpersonal and negotiation skills.
  • Excellent time management skills and a proven ability to meet deadlines.
  • Ability to present to senior management and to influence senior stakeholders.
  • Ability to multitask, prioritize and work on multiple assignments at the time.


Specific Educational Requirements / Accreditations:
  • Bachelor degree in computer science or business administration or IT administration or equivalent.
  • Professional designation (e.g. CISA, CISM, CISSP, CIA).

 
 
 
Short-listing Questions:
Audit experience in operating system audit, database audit - Oracle, DB2, Sybase
Yes
Audit experience with Security access and configuration of public folders, user set-up, file access?
Yes
Audit experience with Sequel Server configuration and authentication set-up
Yes
 
 
Experience with Financial Systems in a Banking Environment *
Yes
Experience working as IT Auditor in a Financial (Banking) Institution *
Yes
Hands-on experience auditing network, Unix, mainframe, database, and various operating systems
Yes
Professional designation? - CISA, CISM, CISSP, CIA
Yes
Communication skills - pls provide rating - 1 to 5 (excellent) *
 
Skills Grid:
 
 
 
 
 
 
0 (No Familiarity) of 5 (Expert)
Domestic Audit Standards
5+ Yrs.
International Audit Standards
5+ Yrs.
IT System Audit *
5+ Yrs.
Large scale (1m to $15m+) System implementation audit experience
5+ Yrs.
Security System Audit
5+ Yrs.
Technical / Infrastructure IT Audit Experience (Mainframe, Distributed) *
5+ Yrs.
How to Apply:
 
Online:
To apply for this and other suitable exciting opportunities with Zylog Systems (Canada) Ltd., you can register and apply online at http://www.zylogcanada.com/
 
Email:
If you would like to email a copy of your resume for review, please reference this posted Job Number or Job Description in the subject line of your email for prompt identification and send your email with attached resume to mailto:resumes@zylog.ca?subject=Senior%20IT%20Auditor%2c%20Infrastructure%20(6250-1511608)
 
Apply Now:
If your browser shows a button to Apply Now, you can use this link to immediately register and apply for this job online.