IT Security Specialist 2/ITSS2
Columbus, OH/On-Site
6+ months


Role Description:

• Monitors computer networks for security violations.
• Installs new security software.
• Prepares reports on security breaches.
• Conducts penetration testing to find vulnerabilities.
• Develops IT security standards, policies and procedures to implement security practices.
• Teaches peers about security procedures.
• Specializes in information and network security.
• Analyzes security risks, and plans controls.
• Implements security improvements by assessing current situation, evaluating trends anticipating requirements.
• Broad understanding of Information Security as a field, including experience evaluating and implementing security policies and practices.
• Coordinates implementation of security controls and implements controls.
• Provides users and management with technical support on matters related to access control.
• Monitors compliance with security policies and procedures.
• Recommends security changes to executive team.
• Knowledge of current and emerging threats/threat vectors.
• Knowledge of security framework (NIST SP 800-53, ISO 27001, NERC, etc.).
• Communicate effectively with both technical and non-technical individuals at all levels of the organization.
• Assess risk of proposed changes to infrastructure, code, and connectivity.
• Perform application updates to Security applications and devices.
• Determine security violations and inefficiencies by conducting periodic audits.
• Act as a technical information security reviewer of performance reports, system status, operating procedures manual and other documents produced.
• May assist with the selection, installation of automated tools that enforce or monitor the compliance with information security policies, standards, procedures, and similar information security requirements.
• Knowledge in vulnerability assessments, intrusion prevention and detection, access control and authorization, policy enforcement, design of secure infrastructure, protocol analysis, and firewall rulesets.
• Incident response.

REQURIED EXERIENCE:
4+ years of experience in the field or in a related area

PREFERRED EDUCTION:
4 year college degree or equivalent technical study.