Business Protection Consultant (5 - 8 years)

Information Security And/Or Business Continuity Program Manager

Responsible for the implementation and maintenance of information security and/or business continuity program activities to protect the client enterprise. Provide expertise to all client operating units, and ensure that processes, controls and documentation are adequate to protect client from existing risks, as well as from potential new threats.

Conduct risk analysis of the technical and non-technical processes that support new and existing client environments, ensuring that actionable and effective controls are in place. Examples include risk analysis and risk mitigation; vulnerability assessments; and preparedness assessments. Maintain required documentation to: mitigate risk, ensure rapid response/recovery for disruptions to essential client processes, and demonstrate HIPAA security compliance. Examples include the client business continuity plan, business impact analysis, comprehensive risk analysis, and client security policies, procedures, and standards. Coordinate company-wide response of information security and/or disaster incidents. Activities include preparing the client enterprise to respond effectively to an incident, including appropriate use of simulation exercises and testing. Assist the director, business protection services in addressing other activities such as IT audit compliance and budget preparation.

Other accountabilities: Conduct ongoing intelligence-gathering activities to stay abreast of trends and techniques in support of new or existing projects. Maintain skills through educational opportunities, including participation in member plan meetings when the subject is pertinent.

Required basic qualifications:

• A minimum of 5 years of experience in similar or progressively responsible position in information security or business continuity/disaster recovery.
• A bachelors degree (BA/BS) in computer science, information management, engineering or related field.

Preferred basic qualifications:

• Masters degree
• Ability to interface with senior management and corporate committees and workgroups to communicate business continuity/disaster recovery related concepts to a broad range of technical and non-technical staff
• Demonstrated skill as a consensus builder with a business-based attitude, results-oriented and commitment-focused.
• Experience within health care insurance or financial services industry
• Ability to interface with management and staff to communicate information security or continuity/disaster recovery related concepts.
• Excellent communication (written and verbal) and facilitation skills
• A strong knowledge of the business environment, information systems portfolio, and operational infrastructure.