Note: The job is a remote job and is open to candidates in USA. Omega Systems is hiring a Security and Compliance Consultant to provide security-related consultations to customers and employees. The role works with customer compliance officers and business units to develop standardized compliance processes, manage assessments and remediation, and support customers’ risk and security posture.
Responsibilities
- Organize and assist in developing action plans to resolve risks
- Organize and assist in planning for deficiencies identified in security assessments
- Plan with customers to meet budgetary needs and risk and security objectives
- Identify and eliminate risks of noncompliance, both externally and internally
- Assisting with educating the workforce on information security through training and building awareness
- Develop remediation scopes and manage regulatory and compliance-related standards and assessments
- Work with other colleagues within OMEGA SYSTEMS teams to deliver an effective security service offering
- Help ensure Customer security services teams focus on achieving results using all available resources from initiation to resolution
- Build effective working relationships at all levels by simplifying complex technical messages and advocating for OMEGA SYSTEMS customer support teams, both externally and internally
- Deploy and manage data discovery platform(s)
- Deploy and manage risk- and security-related scanning tools and application(s)
- Conduct periodic scans of customer networks to discover vulnerabilities
- Develop and review internal company policies and work with customers to ensure they are followed
- Report to customers concerning the organization’s compliance with laws and regulations
- Assist with noncompliance situations by creating realistic plans to address them
- Conduct regular audits to identify potential weaknesses and noncompliance situations
- Assist with penetration testing
- Coordinate efforts with the SOC team on security-related reporting and issues
- Coordinate incident response activities with customers
- Lead technical and forensic investigation activities on breach(es), preparing any reports of findings for management
- Security awareness training of the workforce on information security standards, policies, and best practices
- Incumbent(s) in this position may be required to perform other duties and special assignments not specifically stated
Skills
- Bachelor's degree in information security, business management, law, finance, business administration, or any other relevant field
- 3+ years in roles that directly exposed them to managing risks and ensuring compliance with laws and regulations
- Certified Information Systems Security Professional (CISSP)
- Strong problem-solving and logical thinking skills; able to quickly absorb and relate new technical concepts and build on learned knowledge
- Strong verbal and written communication skills, particularly an ability to relay technical concepts to a business audience
- Experience designing secure networks, systems, and application architectures
- Direct experience with anti-virus software, intrusion detection, firewalls, and content filtering
- Knowledge of disaster recovery technologies and methods
- MS in Computer Science or Information Management
- MS in Computer Science or Information Management
Benefits
- Medical coverage with multiple plan options, including a High Deductible Health Plan with a Health Savings Account (HSA) and employer contribution
- Dental and vision coverage
- Company-paid short-term and long-term disability insurance
- Life insurance
- 401(k) retirement plan with a match
- Flexible work arrangements, with in-office, hybrid, and remote options
- Paid time off and paid holidays
- Additional ancillary policies
Company Overview