Need for Information Risk Security Specialist @ Seattle, WA

Title: Information Risk Security Specialist
Location: Seattle, WA
Duration: 6 to 9 Months + Contract to Hire
 
Position Purpose:
Seeking an experienced, detail-orientated, and motivated Information Risk Security Specialist to monitor and oversee the Information Security program and activities of Avanade, protecting the confidentiality, integrity, availability, and accountability of Avanade’s assets.
 
Key Responsibilities:
    Assisting in maintaining the security and health status of Avanade’s systems by supporting the following tasks:
    Establishes and maintains the annual Information Security Risk Assessment for the entity
    Demonstrate advanced understanding of business processes, internal control risk management, IT controls and related standards
    Identify and evaluate complex technology risks, internal controls which mitigate risks and related opportunities for internal control improvement
    Understand complex business and information technology management processes
    Facilitate the use of technology-based security testing tools or methodologies, synthesize results and make recommendations for technical remediation
    Understand the fundamentals of risk management and using the organization’s risk management framework to risk rate issues and vulnerabilities and effectively  negotiate risk levels and response and complete the required information security
 
Skills/Knowledge:
    Strong Knowledge of Microsoft Technologies
    Strong Knowledge of Cloud Technologies i.e. IaaS, SaaS, PaaS, Public, Private, Hybrid
    Collaboration: Leverage others (people, group, services) to achieve maximum results. Use collaboration tools effectively to support the process
    Ability to work with teams both on shore and off shore, using remote collaboration technologies
    Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
    Experience in full project life cycle and application development desired
    5 or more years in system security, controls or information management experience
    Familiar with security industry standards (ISO 17799, ISO 27001/2, ISO 31000, NIST 800 series, etc.)
    Experience with internal controls, risk assessments, business process and internal IT control testing or operational auditing
    Familiar with regulatory (GLBA, SOX) and standards-body based requirements (ex: PCI) for protecting information
    Implements security improvements by assessing current situation, evaluating trends and anticipating requirements
    Highly motivated and organized with excellent time management and problem solving skills
    Demonstrated ability to write business and technical reports and participate in presentations
    Influencing experience at senior levels within an organization
    Excellent verbal and written communication skills
    Proficiency in spreadsheet and word processing applications
    Industry experiences in high-tech preferred
    Minimum years of experience (or attach Job Description)
    A minimum of five years of experience in Information Security with SANS and/or CISSP accreditation
    Bachelor's degree in Information Technology or Business Administration or a related discipline, or equivalent work experience