Information Security Consultant

Information Security ConsultantHeartland's team of Information Security Consultants provide IT risk management, information security, and compliance consulting services to clients in a variety of industries. Consultants routinely perform risk assessments, audit systems for compliance, work with IT and business leaders to identify and properly mitigate risks, recommend improvements for administrative, technical and physical controls, help clarify compliance requirements, and lead incident response activities. The Information Security Consultant may act as vCISO for a client under the supervision of a Senior Consultant or Practice Manager.Roles and Responsibilities/ Essential Functions:Audit, test, or review IT systems, network or application architecture and business processes for compliance with best practices and/or regulatory requirements.Review and recommend technical, administrative, and physical controls to mitigate identified risk.Perform risk assessments of IT infrastructure and applications and make recommendations for improvements based on the client's stated risk tolerance levels.Develop materials and processes to assist clients with implementing both technical and non-technical controls.Assist with incident response during security events.Minimum of 1450 billed per fiscal year prorated based on start date. These charge hour requirements will be balanced against professional development and on the job training.Competencies:AccountabilityActive ListeningAdaptabilityCommunicationCustomer OrientedDecision MakingInitiativeProblem SolvingProject ManagementWorking Under PressureRequired Experience:2+ years of related experience2+ years implementing Cybersecurity Programs2+ years implementing Compliance and Governance ProgramsPreferred Experience:4+ years of IT Systems implementation or management experience4+ years implementing compliance programs4+ years in leadership roleRequired Skills, Education and/ or Certifications:CISSP or other current industry standard certifications in areas of security expertiseExperience as a security consultant, analyst, engineer, system administrator, IT lead, or similar role focused on information security responsibilitiesAbility to identify and evaluate risk to IT systems and associated business processes and communicate risks to managementDemonstrated experience with regulatory/compliance requirements (e.g., PCI, HIPAA/HITRUST, SOX, FISMA), information security frameworks and controls (e.g., NIST, ISO, CIS)Demonstrated experience reviewing and recommending appropriate technical, administrative, and physical controlsDemonstrated experience selecting and implementing appropriate risk mitigation strategies to ensure IT systems remain within established risk tolerance levelsAbility to develop policies, standards and baseline configurationsStrong attention to detail and ability to document findings and convey informationAbility to manage project deliverables and deadlinesAbility to provide superior customer service via phone and emailStrong listening and presentation skillsAbility to clearly communicate with co-workers, management, clients, and vendorsPreferred Skills, Education and/ or Certifications:Healthcare compliance, privacy, or security certificationCertified Information Systems Security Professional (CISSP) or equivalentCertified Information Systems Auditor (CISA) or equivalent (CISM)Certified in Risk and Information Systems Control (CRISC) or equivalentEqual Opportunity Employer - Including Disabled and Veterans#HBS