Information Security Engineer

Stefanini Group•Atlanta, GA

4d•Hybrid

About The Position

Stefanini Group is hiring! Stefanini is looking for an Information Security Engineer at Atlanta, GA location (Hybrid Role). For quick Apply, please reach out to Akash Gupta: 248 728 2603/ [email protected] W2 candidates only! Qualifications: Under very limited direction, responsible for implementing and administering a comprehensive information security assurance strategy. Acts as the subject matter expert and principal consultant to business clients and department management on matters of information security policy, risk assessment, identity management, access controls and compliance. Identifies solutions for the most complex client inquires/business requirements and implements process improvements aligned with information security frameworks and business needs. Communicates information and ideas clearly and with sensitivity to diversity of audiences. Performs risk assessments, develops/recommends mitigating controls, and remains abreast of advancements that address emerging business and environmental factors impacting assurance levels. Generally responsible for one or more areas including security and identity or compliance. Bachelor's Degree or 4 years equivalent experience; Bachelor's Degree preferred Listed salary ranges may vary based on experience, qualifications, and local market. Also, some positions may include bonuses or other incentives. Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face-to-face conversations will involve a description of the job for which you have applied. We also speak with you about the process including interviews and job offers. About Stefanini Group: The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than four hundred clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence. We are CMM Level 5 company.

Requirements

Under very limited direction, responsible for implementing and administering a comprehensive information security assurance strategy.
Acts as the subject matter expert and principal consultant to business clients and department management on matters of information security policy, risk assessment, identity management, access controls and compliance.
Identifies solutions for the most complex client inquires/business requirements and implements process improvements aligned with information security frameworks and business needs.
Communicates information and ideas clearly and with sensitivity to diversity of audiences.
Performs risk assessments, develops/recommends mitigating controls, and remains abreast of advancements that address emerging business and environmental factors impacting assurance levels.
Generally responsible for one or more areas including security and identity or compliance.
Bachelor's Degree or 4 years equivalent experience; Bachelor's Degree preferred
Experience applying risk management frameworks such as NIST 800-37 is required.

Responsibilities

Leads identity and access management efforts in accordance with security policies, standards, guidelines, and operational procedures.
Implements and troubleshoots the District's user account lifecycle to provision, maintain and terminate user accounts across multiple directories, applications, platforms and networks.
Administers periodic access reviews and supports internal audits of access controls.
Identifies potential weaknesses and opportunities for corrective action.
Designs role-based access controls.
Develops workflows and process documentation.
Identifies potential non-compliance situations and informs department leadership.
Serves as a leading customer interface for the Information Security Department.
Consults with clients regarding access requirements.
Optimizes the use of technology to improve the customer experience.
Troubleshoots complex customer access issues and system/service access requests.
Analyzes and develops process and technology enhancements to improve user account management and performance.
Serves as the District's subject matter expert for Identity and Access strategy and processes, including audit and privacy requirements.
Conducts relevant System and industry research to proactively identify and anticipate changes in identity management processes and compliance requirements.
Advises Information Security colleagues and staff on access management requirements, processes, tools, and technologies.
Consults with information system owners to categorize systems; select, implement and assess controls; and frame, assess and monitor risk.
Maintains risk management documentation to monitor lifecycle progress, track acceptance decisions and catalog remediation actions.
Experience applying risk management frameworks such as NIST 800-37 is required.
Utilizes automated Governance, Risk and Compliance tools to track artifacts of the risk management lifecycle.
Analyzes, designs, and implements business processes and requirements to ensure compliance with security policies and procedures.
In accordance with approved security frameworks, advises information security colleagues and business clients on information security requirements, compliance responsibilities and methods to protect resources and sensitive information.
Reviews internal, government, academic and commercial sources of information to anticipate new security compliance requirements and identify advancements to best practices for protecting resources and information.
Drafts local policies, standards, guidelines and procedures to supplement enterprise security frameworks.
Prepares reports on compliance status and contributes to security breach reporting activities.