Leading Offshore IT & Software Development Outsourcing Company offers various services like software consulting, application development, etc.
Job DescriptionRisk & Compliance Management Skills
· Communicating and coordinating with internal technical teams
· Obtaining and reviewing supporting documentation
· Performing assessments (where necessary) and publishing reports
· Summarizing the adequacy of security controls
· Outlining gaps & remediation steps to develop practical recommendations
· Evaluating internal compliance to regulations such SOX, PCI, HIPPA & SSAE 16
· Capturing assessment results in centralized repository
· Document new processes and workflows while maintaining / improving on existing processes
and workflows
· Effectively lead & manage multiple projects without a great deal of direction or oversight
· Interact with team members and department/division personnel in a professional and mature
manner
· Coordinate enterprise information security risk assessments
· Catalog, track and report the status of risk assessments and resolution actions
· Propose risk mitigations based on cost, benefit and risk
· Keep abreast of current developments and emerging issues and risks both within the
technology organization and the information technology industry, and apply gained knowledge
to risk assessments
QualificationsTechnical skill set
· Should have thorough understanding about cryptographic solutions being used in IT industry
· Should have thorough understanding about cryptographic concepts such as encryption
algorithms, hashing algorithms, digital signatures, nonrepudiation, certificate authority, various
trust models, SSL/TLS encryption etc.
· Should have deep knowledge and working/hands-on experience in designing, implementing and
managing cryptography based solutions such as Public Key Infrastructure (MUST), file integrity
solutions, HSM’s (hardware security module) for secured storage of keys
· Should have thorough understanding about PKI components such as Root CA, Intermediate or
Subordinate CA, Issuing CA, Policy CA, CRL, relevant protocols such as OCSP, SCEP
· Should have experience in integrating PKI solutions with applications/solutions based on
standard protocols such as SSL/TLS - Client/Server authentication/session encryption, SMIME –
signing/encryption, Object signing, Digital Signatures, IPSEC-VPN Tunnels –
authentication/encryption, time-stamping
· Should have conceptual level good understanding on network technologies - basic level routing,
switching
· Should have good understanding about PCI DSS/HIPPA/DPA, other leading compliance
requirements
· Should understand customer's requirements & transform in to a technical control or technical
solution
· Should have understanding about product licensing/bill-of-material/part codes
Project Specific Responsibilities
· Managing several GRC related tasks simultaneously without a great deal of direction or oversight
· Interacting with team members and department/division personnel on other GRC related tasks
· Manage Audits and Coordinate with External Auditors
· Design, implement and manage Enterprise PKI solutions
· Prepare Technical Solution Design Documents, Project Plan
· Work with Customer’s Architecture team for finalizing the solution deployment design
· Validation of Bill of Material/Bill of Quantity against the deliverables
· Documenting High-light key risks/issues, mitigation steps, High-light dependencies on
customer/other teams
· Work with Program Manager for timely updates/tracking of deliverables
· Ensure that project implementation is completed in defined timelines
· Manage resources assigned to project effectively
· If any delays, prepare gap-analysis and raise alarms in project review meetings –
internal/external
· Managing various sign-offs/mile-stone achievement records, share with Sales Account
Manager/Finance guys for billing/invoicing
Additional InformationAndy Bundad - Senior Technical Recruiter
Hi-Tech Solutions, Inc. (HTS)
2 Mid America Plaza Suite 630, Oakbrook Terrace, IL 60181
W: 630-473-6463
www.htsconsulting.com
Skills Required
- Deep, hands-on experience designing, implementing and managing Public Key Infrastructure (PKI)
- Experience with Hardware Security Modules (HSM) for secure key storage
- Thorough understanding of cryptographic concepts: encryption, hashing, digital signatures, non-repudiation
- Knowledge of PKI components and operations: Root CA, Intermediate/Subordinate CA, Issuing CA, Policy CA, CRL
- Familiarity with PKI protocols and services: OCSP, SCEP, CRL distribution, time-stamping
- Experience integrating PKI with applications using standard protocols: SSL/TLS (client/server auth), S/MIME, object signing, IPsec VPN
- Working knowledge of file integrity solutions and related cryptography-based controls
- Understanding of network fundamentals (basic routing and switching) for solution deployment
- Familiarity with compliance frameworks and requirements: PCI DSS, HIPAA, DPA, SOX, SSAE 16
- Ability to prepare technical solution design documents, project plans, and validate bill of materials
- Experience managing audits and coordinating with external auditors
- Ability to document processes, workflows, risks, remediation and coordinate cross-functional teams
- Capability to translate customer requirements into technical controls and solutions
What We Do
Hi-Tech Solutions, Inc. specializes in providing quick-turnaround software development and cloud consulting services. As an Amazon Web Services Partner, the company delivers professional cloud development and migration services, automated telephony development, and comprehensive system integration. They utilize expertise in Java, Linux/Unix, and various web technologies to automate manual daily processes and interface with diverse systems, ensuring improved business efficiency and reduced project risks.






