Senior Information Security Architect

For more details, please connect with Viju Vibudhan at 919-892-9711 or email at [email protected]

End Client: State of North Carolina

Job Title: Senior Information Security Architect

Duration: 12 + Months

Start Date: ASAP

Location: Raleigh, NC 27610 (Remote)

Position Type: Contract

Interview Type: Either Webcam Interview or In Person

Requirement ID : SNC_SECU271_VV

Position # : NCDOT - Architect - Expert ISO Policy Change Development (774271)

Required Skills:

• 5 Years of Progressive advanced experience as an IT information security professional working within an enterprise environment. (Required)
• 5 Years of Detailed technical experience with network security, security protocols, access control, cryptography, application security, and data protection. (Required)
• 5 Years of Extensive experience with data classification, handling, assessment, and enforcement. (Required
• 5 years of Experience implementing and supporting systems within enterprise-class data center environments. (Required)
• 5 Years of Advanced knowledge of regulatory compliance including, but not limited to: OWASP, ISO, NIST, FISMA, PCI-DSS, HIPAA and IRS-1075. (Required)
• 5 Years of Experience leading risk assessments using industry standard frameworks such as ISO or NIST for complex IT projects and technologies. (Required)
• 5 Years of Experience developing, leading and executing information security incident response plans. (Required
• 5 Years of Experience developing and implementing information security policy, standards and procedures. (Required)
• 3 Years of Experience providing research and evidence in support of audits. (Required)
• 2 Years of Experience consulting on information security solutions for a state or federal agency. (Required)
• 2 Years of Detailed expert knowledge of NIST 800-53, and performing risk assessments utilizing NIST 800-53. (Required)
• 2 Years of Detailed expert knowledge of the NIST Cyber Security Framework (CSF), and performing risk assessments utilizing the NIST CSF. (Required)
• Experience consulting on information security and IT solutions for a state motor vehicles agency or department of transportation. (Required)
• Experience performing risk assessments, documenting and driving compliance with the North Carolina DIT State-wide Information Security Manual. (Required)
• 2 Years of Specific experience implementing, administrating, operating or utilizing IBM Qradar SIEM. (Highly desired)
• Experience completing NC Department of Information Technology Vendor Readiness Assessment Report (VRAR) documentation. (Highly desired)
• Current or prior role as a PCI-DSS Qualified Security Assessor (QSA) or PCI-DSS Internal Security Assessor (ISA) (Desired)
• Experience leading or directly supporting PCI-DSS annual assessment for a L1 or L2 merchant, familiarity with PCI-DSS 3.2 or higher. (Desired)
• Strong knowledge and experience architecting/designing implementations, configuring, and risk assessing AWS and/or Azure cloud computing environments. (Desired)
• 5 Years of Hands-on experience implementing, administrating and operating technologies such as firewalls, IDS/IPS, SIEM, antivirus, network traffic analysers (Nice to have)
• CISSP information security certification. (Nice to have)
• Specific experience implementing, administrating, or operating Tenable Nessus. (Nice to have)
• Experience implementing and operating enterprise class data networking solutions. (Nice to have)
• Experience implementing and operating enterprise class server and storage systems. (Nice to have)
• Detailed expert knowledge of ISO 27001, and performing risk assessments utilizing ISO 27001. (Nice to have)
• 2 Years of Familiarity and experience with the Department of Homeland Security (DHS) Cyber Security Evaluation Tool (CSET). (Nice to have)
• Experience completing NC Department of Information Technology Privacy Threshold Analysis (PTA) documentation. (Nice to have)
• Trained and experience implementing and operating with ITIL (formerly Information Technology Infrastructure Library) concepts. (Nice to have).
• ITIL (formerly Information Technology Infrastructure Library) certification. (Nice to have).
• Familiarity and practical experience with SABSA or TOGAF enterprise architecture frameworks and methodologies. (Nice to have).
• SABSA or TOGAF certification. (Nice to have).

The NCDIT-Transportation (NCDIT-T) Information Security Office (ISO) requires a senior information security architect specializing in industry standard security, risk, and compliance frameworks to develop security program documentation and policy.

The NCDIT-Transportation Information Security Office (NCDIT-T ISO) requires a contract information security specialist (expert) architect/analyst resource to provide information security policy, process, procedure, and program development for NCDIT-Transportation and the NCDOT business. This position will be an NCDIT-Transportation Information Security Business Architect (ISBA, working title) dedicated primarily to support the creation and update of NCDOT's security program and related policies, standards, and procedures/processes.
___________________________________________________________________________________________________________________

V Group Inc . is an IT Services company which supplies IT staffing, project management, and delivery services in software, network, help desk and all IT areas. Our primary focus is the public sector including state and federal contracts. We have multiple awards/contracts with the following states: CA, FL, GA, KY, MD, NC, NY, OH, OR, PA, SC, TX and VA. If you are considering applying for a position with V Group, or in partnering with us on a position, please feel free to contact me for any questions you may have regarding our services and the advantages we can offer you as a consultant.

Please share my contact information with others working in Information Technology.

Website:
Twitter: VGroupITServices@VGroupITService
Facebook: