Security & Compliance Consultant (42873)

Position: Security and Compliance Consultant
Reports To: Security and Compliance Officer
Division: IT 
FSLA: Exempt
Office Designation: In Office, Hybrid, Remote
 

Under the guidance of the Manager, SOC, this position is responsible for security related consultations with OMEGASYSTEMS Customers and employees working from OMEGASYSTEMS offices as well as Customer locations and remote locations. Security and Compliance Consultants coordinate with customer Compliance Officers and various business units on creating standardized processes and tools for identifying and implementing regulatory rules sets, auditing and tracking of policies and operating procedures, and help manage the overall risk and security posture of a customer’s environment.

Functional Responsibility and Task Statements

Planning Responsibilities

• Organize and assist in developing plans of actions for risk management resolution.
• Organize and assist in planning for deficiencies identified in security assessments.
• Planning with customers for budgetary needs to meet risk and security objectives.

Operational Responsibilities

• Identifying and eliminating the risks of noncompliance, both externally and internally. 
• Assisting with educating the workforce on information security through training and building awareness
• Developing scopes for remediations efforts and managing regulatory or compliance related standards and assessments.

Leadership and People Responsibilities

• Work with other colleagues within OMEGASYSTEMS teams to deliver an effective security service offering.
• Help ensure Customer security services teams are focused on achieving results using all resources available from initiation to resolution.
• Strong problem-solving and logical thinking skills, able to absorb and relate to new technical concepts quickly and build on knowledge learned.
• Strong verbal and written communication skills, particularly an ability to relay technical concepts to a business audience.
• Ensure that effective working relationships at all levels are achieved by simplifying complex technical messages and acting as an advocate of OMEGASYSTEMS Customer support teams both externally and internally.

Technical Responsibility and Task Statements

• Deploy and manage data discovery platform(s).
• Deploy and manage risk and security related scanning tools and application(s).
• Conducts periodic scans of customer networks to discover vulnerabilities.
• Experience designing secure networks, systems and application architectures
• Direct experience with anti-virus software, intrusion detection, firewalls and content filtering
• Develop and review internal company policies and working with customer to see that they are respected.
• Report to customers concerning the organization’s compliance with laws and regulations.
• Assist in dealing with noncompliance situations, creating realistic plans to overcome them.
• Conduct regular audits to identify potential weaknesses and noncompliance situations.
• Assist with penetration testing
• Coordinate efforts with SOC team on security related reporting and issues.
• Coordinate incident response activities with customers.
• Lead technical and forensic investigation activities on breach(s), preparing any reports of findings for management.
• Security awareness training of the workforce on information security standards, policies and best practices
• Knowledge of disaster recovery technologies and methods
• Incumbent(s) in this position may be required to perform other duties and special assignments not specifically stated.

Environmental:  The job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, etc.

Travel Requirements: Minimal travel is required for this position.

Desired Qualifications and Skills

Required

• 3+ years in roles that directly exposed them to managing risks and ensuring compliance with laws and regulations
• Bachelor’s degree in information security, business management, law, finance, business administration or any other relevant field
• Certified Information Systems Security Professional (CISSP)

Preferred

• MS in Computer Science or Information Management

EEO STATEMENT
It is the Company's policy to provide equal employment opportunity for all applicants and employees. Omega Systems provides equal employment opportunities to all qualified individuals without regard to actual or perceived race including hair texture and natural hair styles), color, religion, religious creed (including religious dress and religious grooming practices), sex (including pregnancy, perceived pregnancy, childbirth, breastfeeding, or related medical conditions), gender, gender identity (including transgender identity, status and transitioning), gender expression and sex stereotyping, national origin, ancestry, citizenship, age, physical or mental disability, legally protected medical condition or information (including genetic information), family care or medical leave status, military caregiver status, military status, veteran status, marital status, domestic partner status, sexual orientation, status as a victim of domestic violence, sexual assault or stalking, enrollment in a public assistance program, engaging in protected communications regarding employee wages, requesting a reasonable accommodation on the basis of disability or bona fide religious belief or practice, or any other basis protected by local, state, or federal laws. Applicants, as well as employees, who are or become disabled must be able to perform the essential job functions with or without reasonable accommodation. The Company shall determine reasonable accommodation on a case by case basis in accordance with applicable law.