- Home
- »All Job Categories
- »Information Technology Jobs
Auto-apply to these information technology jobs
We've scanned millions of jobs. Simply select your favorites, and we can fill out the applications for you.
Seneca ResortsNiagara Falls, NY
The Director of Information Security & Assurance (ISA) is responsible for establishing and maintaining an enterprise-wide information security program to support the confidentiality, integrity and availability of Seneca Gaming Corporation's information assets. The Director of ISA collaborates and consults with IT management and business units to develop appropriate security controls. The Director leads the development of information security policies, procedures, and best practices and works with internal and external teams to implement and promote compliance with those procedures, best practices and/or regulatory compliance requirements. The Director of ISA is responsible for the development of an information security & assurance strategy within the context of a risk-based approach. This position is responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements. This position requires a visionary leader with strong leadership skills, business acumen and technology. The Director of ISA will work proactively with business units to implement practices that meet defined policies and standards for information security lead IT risk management activities. The Director will report directly to the CIO and provide guidance for all Information Technology Security and Assurance concerns. The Director will also have an indirect reporting relationship to the SGC Audit Committee for audit compliance services. ESSENTIAL FUNCTIONS AND RESPONSIBILITIES: Works in close partnership with VP of Information Technology / CIO to ensure coordinated and effective information security operations across all systems and platforms. Works closely and collaborates with Technical Services, Systems, Network, Operations, Applications and Support teams to ensure alignment between the information security and the enterprise information technology architecture, thus coordinating the strategic planning implicit in these architectures. Leads and oversees the daily operations of the information security & assurance department and develops programs and best practices on information security domains such as access control, telecommunications and network security, risk analysis and security governance, security architecture, cryptography, operational security, application security, and business continuity/disaster recovery. Together with the CIO, develops, implements, and monitors, a strategic, comprehensive enterprise information security and risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization. Manages the enterprise's security organization, consisting of direct reports and indirect reports and leads all hiring, training, staff development, performance management and annual compensation reviews. Identifies legal, regulatory, organizational and other requirements and provides recommendations for managing the risk of non-compliance. Identifies gaps between current and desired risk levels. Develops and communicates organizational information security policies and standards. Leads the development of and provides management oversight for the information security operating and capital budgets and monitors for variances. Creates and manages information assurance and risk management awareness training programs for all employees and approved system users. Acts as the liaison between Internal Audit, Legal, Human Resources and Compliance Departments providing leadership and oversight for audit and information assurance activities. Works directly with the business units to analyze information security risks and recommends appropriate risk treatment options to manage risk to acceptable levels. Provides subject matter expertise to executive management on a broad range of information security standards and best practices, such as CIS, NIST, NIGC MICS, PCI DSS, COBIT, ITIL. Provides strategic and tactical security guidance for all IT projects, including the evaluation and recommendation of technical controls. Creates and facilitates the information assurance risk assessment process, including reporting and oversight of remediation efforts to address negative findings. Collaborates on the development of a secure information technology infrastructure that provides reliable, resilient, responsive and secure enterprise information technology services. Manages security incidents and events to protect corporate IT assets, including intellectual property, fixed assets and the company's reputation. Coordinates the use of external resources involved in the information assurance program, including, but not limited to, interviewing, negotiating contracts and fees, and managing external resources. Assists in the development of effective disaster recovery policies and procedures. Develops business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the maturity of the security program. QUALIFICATIONS/REQUIREMENTS: Education/Experience: Must be 18 years of age or older upon employment. Bachelor's Degree in an Information Technology related field. Minimum of ten (10) years of experience in an Information Technology management role with a combination of information technology and demonstrable information security and assurance responsibilities. Minimum of five (5) years in Information Technology project management, systems design and integration and experience leading project teams using formal project management methodologies A level of pertinent security/risk-focused certification, e.g. Security+, CISSP, CISM, CISA, CRISC. An equivalent combination of education and/or experience may be substituted for the above requirements. A deep understanding of and extensive experience with implementing network operating systems, systems design and enterprise architecture, systems development lifecycle (SDLC), project management methodology, asset management, access control systems, network communication protocols and topology, security engineering, public key infrastructure and identity and access management concepts. Experience with security/risk-specific program/program component development, e.g. information security governance & continuous improvement, security awareness, vulnerability management, data protection, endpoint protection, identity & access management, cryptography & key management, business continuity/disaster recovery, incident response. Direct experience with IT-based audit processes. Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences. Must be a critical thinker with strong problem-solving skills. Knowledge of technological trends and developments in the area of information assurance and risk management. Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals. Knowledge of security and control frameworks, such as CIS, NIST, NIGC MICS, PCI DSS, COBIT, and ITIL. Experience with contract and vendor negotiations. High level of personal integrity and ethical standards and the ability to professionally handle confidential matters and exemplify the appropriate level of judgment and maturity. High degree of initiative, dependability and ability to work with little supervision. Must possess and maintain a valid driver's license and be able to substantiate a safe driving record within the parameters acceptable to our liability insurance carrier. Language Skills and Reasoning Ability: Must possess excellent communication skills: listening, writing, speaking, and interpersonal skills. Must have the ability to speak effectively to the public, employees, customers and vendors. Must have the ability to deal effectively and interact well with the customers, vendors and employees. Must have the ability to resolve problems/conflicts in a diplomatic and tactful manner. Physical Requirements and Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderately loud. When on the casino floor, the noise levels increase to loud. Must be able to work in an environment where smoking is permitted. Must be able to stand, walk, and move through all areas of the casino. Maintain physical stamina and proper mental attitude to work under pressure in a fast-paced, casino environment and effectively deal with customers, management, employees, and members of the business community in all situations. Salary Starting Rate: $143,936.95 Compensation is negotiable based on experience and education. Each position has varying minimum qualifications. In the absence of fully qualified candidates, some requirements may be waived.
Posted 30+ days ago
CONTACT GOVERNMENT SERVICESAustin, TX
$92,213 - $125,147 / year
ISSO Employment Type: Full-Time, Experienced Department: Information Technology CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you'll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements. CGS brings motivated, highly skilled, and creative people together to solve the government's most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success: Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades. Maintain responsibility for managing cybersecurity risk from an organizational perspective. Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership. Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies. Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO). Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes. Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF. Provide subject matter expertise for cyber security and trusted system technology. Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems. Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&As), security test and evaluation reports, and security engineering practices and processes. Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring. Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems. Qualifications: Bachelor's Degree. A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc. eMASS experience. Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher. Strong desktop publishing skills using Microsoft Word and Excel. Experience with industry writing styles such as grammar, sentence form, and structure. Ability to multi-task in a deadline-oriented environment. Ideally, you will also have: CISSP, CASP, or a similar certificate is preferred. Master's Degree in Cybersecurity or related field. Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking. Demonstrated ability to work well independently and as a part of a team. Excellent work ethic and a high commitment to quality. Our Commitment: Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client's specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we've been growing our government contracting portfolio, and along the way, we've created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package. Health, Dental, and Vision Life Insurance 401k Flexible Spending Account (Health, Dependent Care, and Commuter) Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: https://cgsfederal.com/join-our-team/ For more information about CGS please visit: https://www.cgsfederal.com or contact: Email: [email protected] #CJ $92,213.33 - $125,146.66 a year We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Posted 30+ days ago
AeconCharlotte, NC
Come Build Your Career at Aecon! As a North American leader in infrastructure development, Aecon is safely and sustainably building what matters for future generations to thrive! We lead some of the most impactful infrastructure projects of our generation, at the forefront of transformational change in transportation and energy, and partnering every day to build, connect, power, and strengthen our communities. At Aecon, you can count on: Safety Always. Our number one core value. If we can't do it safely, we don't do it at all. Integrity. We lead by example, with humility and courage. Accountability. We're passionate about delivering on our commitments. Inclusion. We provide equitable opportunities for everyone. We lead the infrastructure industry with purpose, and our people are at the heart of everything we do. So, we invest in our people, just like they invest in us! At Aecon we: Ensure you and your family receive the services needed to support your mental, emotional, and physical well-being. Believe in helping you build your career through our Aecon University and Leadership Programs. Are committed to supporting and investing in inclusive work environments, through initiatives like Diversity, Equity, Inclusion, & Accessibility training, our Aecon Women in Trades and Aecon Diversity in Trades programs, and our Employee Resource Groups (ERGs) to ensure we are building inclusion into every aspect of our culture at Aecon. Are a leader in sustainable construction. With a strong commitment to operating responsibly by minimizing our impact on the environment and surrounding communities. Our business success relies on strong execution and continuous improvement - driven by the diversity, expertise and teamwork of our people. We're always searching the globe for innovative, collaborative minds to join our best-in-class Aecon community! The Program Information Manager will be responsible for evaluating, establishing, and ensuring proper implementation and compliance with information management processes in accordance with company policies and objectives, and government laws and regulations. This will include electronic records management, distribution, classification, retention and destruction. The Program Information Manager will ensure implementation and compliance of cornerstone applications for project information management for our US Nuclear and Federal Operations. This is a new position to support continuing growth of our US Nuclear operations. The Program Information Manager will report to our Associate Director of Commercial Operations and be based in our Charlotte North Carolina office with periodic travel to our project sites as needed. What You'll Do Here Build a team of information management specialists that support Aecon's US Nuclear projects. Provide oversight to field information specialists assigned to ensure compliance with corporate, project and regulatory requirements Design specific streamlined process flows for coordination of information amongst engineering, procurement, construction, Quality Assurance and other support departments Ensure effective implementation of an Aconex document control system to manage document lifecycle and ensure record accuracy and processing efficiency. Identify and extract reports and perform queries from Aconex content management system. Oversee internal and external document review process. Establish and uphold proper information configuration management in support of engineering, procurement, construction and Quality Assurance. Ensure documents meet quality control standards and comply with corporate policies. Collaborate with project material control, scheduling, expediting, construction, quality assurance and client engineering to ensure time/cost effectiveness of all documentation activities. Maintain the accuracy, completeness and compliance of Aconex data, conducting quality assurance checks/audits, and generating reports and dashboards. Provide training and support of project and department users to effectively deploy Aconex information management system. Oversee and development of document control information specialist across the enterprise and portfolio of US based projects Works with Aecon's Corporate Nuclear Technical Services management to implement company wide applications for project information and records management. Identify areas for improvement in the utilization, effectiveness and efficiency in the US Nuclear Team's application of Aconex and document management system. Provide subject matter expertise and leadership in budgeting, staffing, and professional development of information documentation and records management personnel What You Bring To The Team Bachelor's degree in records management, business administration, construction management, information technology or equivalent Minimum of 12 years in information management with a minimum of 3 years in a lead/supervisory role on a large construction project. Knowledge of federal laws and policies associated with records management and handling of Controlled Unclassified Information and Nuclear Quality Assurance records. Knowledge of Commercial Nuclear Regulatory Guides associated with Document Control and Records Management and industry standards defined by Nuclear Information and Records Management Association (NIRMA) Citizen of the United States Ability to obtain DOE/DOD/NRC clearance as necessary Experience working on large-scale engineering, procurement and construction (EPC) projects. Strong proficiency in enterprise document management, relational databases, and internet based project collaboration systems. Capability in performing comprehensive duties that require extensive and diversified experience and the ability to make independent decisions. Problem solving mindset to support users and troubleshoot issues, evaluate options and resolve complex problems within the Aconex platform. Strong knowledge and experience to establish, modify and maintain information management processes and procedures utilizing Aconex content management system. Proven training methodologies and knowledge to strengthen and develop project information management personnel in the implementation of their responsibilities and ensure implementation compliance Proficiency in Microsoft Office Suite of tools. Maximize utilization and collaboration of data sharing across the projects, departments, client and project management groups Must have the ability to handle all matters in a confidential and professional manner. Excellent organizational, communication and customer relationship skills to build and support stakeholders expectations. Must have a full appreciation of the importance of Quality Assurance Programs and their significance to the nuclear and federal industries Leadership qualities to be an effective change agent possessing excellent communication skills to engage stakeholders and the agility for adapting to an evolving culture Aecon fosters diversity, inclusion and belonging within and across our organization. We consider all applicants for positions without regard to race, color, religion, sex, national origin, age, mental or physical disabilities, veteran status, and all other characteristics protected by law. We are committed to adhering to the objectives and requirements outlined in the Equal Employment Opportunity Commission (EEOC), and to meeting the accessibility needs of persons with disabilities in a timely manner, through the implementation of the requirements of the EEOC and its applicable regulations. Appropriate accommodation under the EEOC will be provided upon request throughout the interview and hiring process.
Posted 5 days ago
CareBridgeAtlanta, GA
Business Information Consultant- Health System Reimbursement Location: This role requires associates to be in-office 1 day per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Ideal candidates will be able to report to one of our Pulse Point locations in Atlanta, GA, Richmond, VA, Indianapolis, IN, Wallingford, CT or Mason, OH. Alternate locations may be considered if candidates reside within a commuting distance from an office. Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law. The Business Information Consultant- Health System Reimbursement is responsible for serving as an expert in data analysis, reporting and formulating recommendations and providing guidance to other data analysts. How you will make an impact: Establishes, improves, and optimizes the consolidating processes for forecast and month-end results. Consolidates and prepares executive summary reports for various business segments in the SBU for top management decision-making. Analyzes and designs solutions to address varied and highly complex business needs. Collaborates with businesses and technical areas to implement new or enhanced products. Coordinates with external audits as appropriate. Acts as the central contact with internal departments and external auditors. Creates and maintains databases to track business performance. Analyzes data and summarizes performance using summary statistical procedures. Develops and analyzes business performance reports (e.g. for claims data, provider data, utilization data) and provides notations of performance deviations and anomalies. Creates and publishes periodic reports, as well as any necessary ad hoc reports. Makes recommendations based upon data analysis. Provides analytic consultation to other business areas, leadership or external customers. Data analysis and reporting encompasses a much higher level of complexity. Minimum Requirements: Requires a BS/BA degree in related field and a minimum of 5 years of experience; or any combination of education and experience which would provide an equivalent background. Preferred Skills, Capabilities and Experiences: Proficient in modeling the financial impacts of changes in reimbursement structures and rates for health systems such as hospitals and physician practices highly preferred. Experience benchmarking hospital or physician rates against Medicare reimbursement highly preferred. Excel, SQL, and SAS experience highly preferred. Strong knowledge of products as well as our internal business models and data systems highly preferred. Experience providing leadership in evaluating financial performance of complex organizations highly preferred. Excellent leadership, problem solving, organizational, planning, presentation and interpersonal skills highly preferred. Ability to work independently and draw up plans to address issues/concerns highly preferred. Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health. Who We Are Elevance Health is a health company dedicated to improving lives and communities - and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve. How We Work At Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business. We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few. Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process. The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19 and Influenza. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws. Elevance Health is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact elevancehealthjobssupport@elevancehealth.com for assistance. Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including, but not limited to, the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act.
Posted 30+ days ago
Wintrust Financial Corp.Rosemont, IL
$120,000 - $150,000 / year
Wintrust provides community and commercial banking, specialty finance and wealth management services through its 16 bank charters and nine non-bank businesses. Wintrust delivers the sophisticated solutions of a large bank while staying true to the relationship-focused, personalized service of our community banking roots. We serve clients in all 50 states with more than 200 branch banking locations in Illinois, southwestern Florida, northwestern Indiana, west Michigan and southern Wisconsin and commercial banking offices in Chicago, Denver, Milwaukee, Grand Rapids, Mich., and in key branch banking locations throughout Illinois. Our people are the heart of our business and we are proud to rank consistently as a top place to work. Wintrust is a $66 billion financial institution based in Rosemont, Illinois, and listed on the NASDAQ Global Select Market under the symbol "WTFC." Why join us? An award-winning culture! We are rated a Top Workplace by the Chicago Tribune (past 11 years) and Employee Recommended award by the Globe & Mail (past 6 years) Competitive pay and discretionary or incentive bonus eligible Comprehensive benefit package including medical, dental, vision, life, a 401k plan with a generous company match and tuition reimbursement to name a few Promote from within culture Why join this team? This position has the opportunity to interface with and have a positive impact on multiple areas of Wintrust's business We hold ourselves accountable to high standards, share wins, operate ethically, and have fun Position Overview The SR Information Security Engineer (AI) reports to the Information Security Director (Security Architecture and Analytics) to support Wintrust's Responsible Artificial Intelligence Alliance (RAIA). The SR Information Security Engineer (AI) position is a hands-on engineering role for someone who likes working in multi-disciplined teams. What You'll Do Lead security assessments within the RAIA for Large Language Models (LLMs), Natural Language Models (NLMs), Small Language Models (SLMs), or other projects under the scope of Artificial Intelligence Participate in the RAIA to review use cases based on value, complexity, feasibility, risks, compliance, and alignment with strategic goals Review AI architectural designs and usage within third-party products for compliance with security best practices, AI security frameworks, and regulatory requirements Participate in the RAIA to build an maintain standards and frameworks for Wintrust to use in order to review use cases and help the business develop use cases Analyze AI models for security risks specific to models such as bias, data exposure, data leakage, and model poisoning Education and awareness of AI security landscape, emerging threats and mitigating controls Responsible for other duties and responsibilities as assigned based on Wintrust's needs Qualifications Bachelor's degree in computer science or mathematics 2-3 years of practical hands-on experience with Artificial Intelligence Total of 5 years' experience including security/data security/control validation Data processing skills a plus Benefits Medical Insurance • Dental • Vision • Life insurance • Accidental death and dismemberment • Short-term and long-term Disability Insurance • Parental Leave • Employee Assistance Program (EAP) • Traditional and Roth 401(k) with company match • Flexible Spending Account (FSA) • Employee Stock Purchase Plan at 5% discount • Critical Illness Insurance • Accident Insurance • Transportation and Commuting Benefits • Banking Benefits • Pet Insurance Compensation The estimated salary range for this role is $120.000.00 - $150,000.00, along with eligibility to earn an annual bonus. Actual salaries may vary based on several factors, such as a candidate's qualifications, skills and experience. #LI-Hybrid #LI-JB1 From our first day in business, Wintrust has been proud to serve a variety of unique communities and people from all walks of life. To build a company that reflects the communities we serve, we believe that fostering a unique and inclusive workplace where everyone feels valued and empowered to succeed will support our ongoing success. Wintrust Financial Corporation, including community banking and financial services subsidiaries, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected categories.
Posted 30+ days ago
WhoopBoston, MA
$150,000 - $190,000 / year
At WHOOP, we're on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is seeking a Senior Information Security Engineer to serve as a technical leader in our Security team reporting to our Information Security Manager. In this role, you will drive the deployment and continuous enhancement of controls that protect millions of users' biometric and health data, build scalable defenses across our infrastructure and applications, and lead incident response efforts with visibility across the business. This is an opportunity to have direct impact at scale, working alongside engineers, product teams, and executives to drive forward-looking security strategies. RESPONSIBILITIES: Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness. Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role. Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements. Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling. Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance. Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance. Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows. Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization. Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies. Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes. QUALIFICATIONS: Bachelor's degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.). 8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity. Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG). Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools. Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems. Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices. Demonstrated leadership in security incident response, investigations, and root cause analysis. Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences. Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment. Experience mentoring engineers and setting operational standards. Familiarity with compliance and risk frameworks relevant to health and AI (SOC 2, ISO 27001, PCI, GDPR, FTC guidance, HIPAA-adjacent state laws) is a plus. Interested in the role, but don't meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company's long-term growth and success. The U.S. base salary range for this full-time position is $150,000 - $190,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate's specific qualifications, expertise, and alignment with the role's requirements. Learn more about WHOOP.
Posted 30+ days ago
Varex ImagingSalt Lake City, UT
To apply to a Varex Imaging position, please create an account and sign-in. CURRENT VAREX IMAGING EMPLOYEES: Please apply by logging into your internal Workday Account. Summary The Manager of the Enterprise Services Team is responsible for streamlining and optimizing the company's application portfolio, acting as an active gatekeeper for new and existing applications, and leading a team dedicated to operational excellence, security, and continuous improvement. This role requires strategic vision, strong leadership, and a commitment to collaboration and innovation. Job Description Performs all required management responsibilities including but not limited to: implementing the company's policies, programs, and guidelines; ensuring employee productivity and growth; managing resources; knowing Varex's business; and maintaining functional, technical, and external market awareness necessary for managing immediate organization. Typically focused on internal IT service delivery for employees, but may have an external client focus if involved with company-hosted, web-enabled, or outsourced solutions delivery. Key Responsibilities Application Portfolio Management Conduct comprehensive inventory and assessment of all hosted applications (internal, third-party, cloud). Analyze applications to identify redundancies, overlaps, and gaps; develop strategic plans for consolidation and reduction. Establish and enforce robust administration and governance practices for application usage, licensing, performance monitoring, and compliance. Actively monitor application relevance and usage through regular audits and user feedback. Evaluate and endorse new applications to ensure alignment with company goals and minimize complexity Leadership & Team Development · Lead by example in time management and project prioritization · Develop a skills and capabilities matrix; provide mentoring, feedback, and professional growth opportunities. · Encourage continuous learning and support career development Operational Excellence & Service Integration (DevOps in a Non-Coding Context) · Promote seamless collaboration between IT operations, service management, and business stakeholders to improve service delivery · Develop and implement processes that enhance the reliability, efficiency, and responsiveness of enterprise applications and services · Coordinate incident management and problem resolution to minimize downtime and maintain business continuity · Support and implement security initiatives to safeguard enterprise applications · Prioritize tasks, delegate effectively, and utilize project management tools for tracking progress · Foster a culture of continuous improvement by regularly reviewing application performance and implementing best practices Strategic Planning & Innovation · Develop and communicate a long-term vision for the team, aligned with organizational strategy. · Optimize resource utilization, manage budgets, and seek additional resources as needed. · Encourage collaboration and cross-training to build a resilient, adaptable team. · Stay current with technology trends; evaluate and implement innovative tools and processes. Performance Management · Set clear, measurable goals and objectives for the team, aligned with organizational priorities. · Monitor progress, adjust strategies, and conduct regular performance reviews. · Recognize and reward outstanding contributions; address performance issues promptly. Experience Required Enterprise Application Management: Proven experience in managing large portfolios of enterprise applications, including inventory, assessment, consolidation, and governance. IT Service Management: Hands-on experience implementing ITIL, ITSM, or similar frameworks for service delivery, incident management, and process optimization. Security Initiatives: Experience supporting and implementing security best practices for enterprise applications, including compliance and risk management. Project and Time Management: Demonstrated ability to prioritize tasks, delegate responsibilities, and utilize project management tools to track progress and outcomes. Team Leadership & Mentoring: Experience leading technical teams, developing skills matrices, mentoring staff, and fostering professional growth. Strategic Planning: Experience developing long-term vision and strategy for IT teams, aligning technology initiatives with organizational goals. Continuous Improvement: Track record of promoting and implementing continuous improvement practices within IT or enterprise services teams. Communication & Collaboration: Strong communication skills, with experience collaborating across departments and presenting to senior leadership. Performance Management: Experience setting measurable goals, conducting performance reviews, and managing team performance. Qualifications B.S. degree in Information Systems, Computer Science, or related field. 7+ years of experience in IT service management, application portfolio management, or related areas. Experience with application governance, security initiatives, and incident management processes. Time Type: Full time Job Type: Regular Work Shift: N/A Pay Rate Type: Salary Benefits and Perks Varex Imaging provides competitive pay and benefits to support the financial, physical, and emotional well-being of the people who make our company successful. Medical Insurance Dental/Vision 10 Paid Holidays PTO Employee Stock Purchase Plan 401K match Paid Parental Leave Short & Long-Term Disability and Life Insurance Competitive Pay Flexible Schedules Variety of Shift Options Free Safety Shoes Friendly Work Environment On-site Cafeteria, Company Nurse, Credit Union, and Gym Free Coffee and Soda Tuition Reimbursement Employee Referral Program Career Advancement Opportunities Employee Discounts EV Charging Stations All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.
Posted 3 weeks ago
Parsons Commercial Technology Group Inc.Huntsville, AL
$108,700 - $190,200 / year
In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible. Job Description: Parsons Information Systems Security Officer will develop, maintain, and assist with the implementation of information system security policies, procedures, and standards. They will work within Army eMASS to update artifacts, documentation, and track POA&M statues to guide systems through the entire RMF lifecycle. The ISSO will be responsible for shepherding the package through the entire accreditation process, documenting all of the various system components and operations. What You'll Be Doing: Work closely with the information system designers; the ISSO will be the first point of contact for this effort. Provide training on the use of information systems, and interact frequently with the program team as partners. Play a key role in the operation of an Army accredited information system, enabling the success of critical national security objectives. What Required Skills You'll Bring: 3+ years experience and Bachelor's degree in Information Systems, or related degree; or equivalent professional experience. Strong and effective written and oral communication skills. Candidate must be at least IAM I, Security+ CE or other certification. Candidate must be familiar with US Government policies and directives (e.g., NIST 800-53, NISPOM/32 CFR, JSIG) Experience with DCSA RMF accreditation process is required. Experience with Enterprise Mission Assurance Security System (eMASS) What Desired Skills You'll Bring: Experience working internal and external customers to include military, USG civilians, and other DOD contractors. Familiarity with: Microsoft Windows Administration, Linux, STIGs, SCAP, Routing and Switching. Preference for prior system administration and design experience. Security Clearance Requirement: An active Secret security clearance is required to apply, however, the selected candidate must be able to obtain a Top Secret SCI clearance prior to the start date. This position is part of our Corporate team. For over 80 years, Parsons Corporation, has shaped the future of the defense, intelligence, and critical infrastructure markets. Our employees work in a close-knit team environment to find new, innovative ways to deliver smart solutions that are used and valued by customers around the world. By combining unique technologies with deep domain expertise across cybersecurity, missile defense, space, connected infrastructure, transportation, smart cities, and more, we're providing tomorrow's solutions today. Salary Range: $108,700.00 - $190,200.00 We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, Employee Stock Ownership Plan (ESOP), 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle! Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. We truly invest and care about our employee's wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest-APPLY TODAY! Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/ .
Posted 30+ days ago
Applied Research Associates, Inc.Albuquerque, NM
$100,000 - $115,000 / year
The Southwest Division (SWD) of Applied Research Associates, Inc. (ARA) is seeking an experienced Information Systems Security Manager (ISSM) to join our Albuquerque, NM. security team. In this role, you will be responsible for overseeing and managing the classified information security program; developing and implementing information security policies, standards and procedures. The ISSM will support Information System (IS) full life cycle activities including preparing accreditation/certification packages in accordance with relevant regulations and standards, maintenance and monitoring of operational systems, system upgrades and feature additions during program execution, and system decommission and de-certification activities. The ISSM must have experience in developing Risk Management Facility (RMF) accreditation packages to ensure IS's are operated and maintained in accordance with ARA and customer security requirements. The ISSM will maintain Authorization to Operate (ATO) certifications for networked systems and ARA applications by developing IS documentation including the executive summary, system security plan, privacy plan, security control assessment, privacy control assessment, risk assessments, equipment specifications, and any relevant plans of action and milestones. The ability to work independently, as well as with teammates, is paramount for this position as it is an extremely dynamic environment. A successful candidate will have strong written and oral communication skills who takes the initiative and creates decisive paths to complete tasks. The ISSM should have experience with security assessments & hardening tools; possess strong understanding of operating systems (Windows and Linux); have or be able to obtain Security + certification and have a working knowledge of eMASS applications. ARA is an employee-owned company that offers competitive compensation and excellent benefits including medical and dental coverage, 401(k) profit sharing, life and long-term disability insurance, performance bonuses, and professional development. Salary Range: $100,000 - $115,000 (Dependent on experience) Basic Qualifications: SECRET security clearance with the ability to obtain a TOP SECRET security clearance Position requires a minimum of five to seven years of related experience. Previous experience as an ISSO/ISSM is required. DoD Directive 8570.1 IAM Level II or higher certification. Familiar with the 32 CFR Part 117, DAAG, NIST RMF, DoDM 5205.07, and/or JSIG IS requirements. Experience investigating security incidents to include data spills, data integrity incidents and malicious code incidents Experience with compliance certifications of various operating systems. Experience with Windows and Server as well as Linux/Unix-based systems.
Posted 3 weeks ago
VRC CompaniesClanton, AL
Apply Description Description: The Release of Information (ROI) Specialist I within the VitalChart department of VRC Companies, LLC ("VRC") is responsible for processing all assigned requests for medical records in a timely, efficient manner while ensuring accuracy and the highest quality service to healthcare clients. This position must, always, safeguard and protect the patient's right to privacy by ensuring that only authorized individuals have access to the patient's medical information and that all Release of Information requests follow the request authorization, VRC, and healthcare facility policies as well as federal/state statutes, such as HIPAA. Additionally, this position is required to continually perform at a high quality and productivity level. This position interacts with the ROI Area Manager and/or ROI Team Leader regularly and will keep them informed of any concerns or issues regarding quality, connectivity, client concerns, and requestor issues that may impact VRC performance or service expectations. This position must conduct interpersonal relationships in a manner designed to project a positive image of VRC. Key Responsibilities / Essential Functions Assigned Release of Information request types will primarily be Continuing Care and Disability Determination Services, with cross-training on other request types as supervisor deems appropriate based on experience and performance Accesses Release of Information requests and medical records for healthcare client(s) according to the specific procedure and security protocol for each client Completes Release of Information requests daily, prioritizing requests as needed based on turnaround timeframes and procedures of VRC and the service agreement between the healthcare facility and VRC validates requests and signed patient authorizations for compliance with HIPAA, other applicable federal and state statutes, and established procedure classifies request type correctly logs request into ROI software retrieves and uploads requested portions of the patient's medical chart (from electronic or physical repository) performs Quality Control checks to ensure accuracy of the release and to avoid breaches of Protected Health Information (PHI) checks for accurate invoicing and adjusts invoice as needed releases request to the valid requesting entity Rejects requests for records that are not HIPAA-compliant or otherwise valid For records pulled from a physical repository, returns records to proper location per VRC and healthcare client procedure Documents in ROI software all exceptions, communications, and other relevant information related to a request Alerts supervisor to any questionable or unusual requests or communications Alerts supervisor to any discovered or suspected breaches immediately Alerts supervisor to any issues that will delay the timely release of records Answers requestor inquiries about a request in an informative, respectful, efficient manner Stores all records and files properly and securely before leaving work area. Ensures adequate office supplies available to carry out tasks as soon as they arise Is available and knowledgeable to take on additional healthcare facilities or request types to assist during backlogs Understands that healthcare facility assignments (on-site and/or remote) are subject to change Carries out responsibilities in accordance with VRC and healthcare facility policies and procedures as well as HIPAA, state/federal regulations, and labor regulations Maintains confidentiality, security, and standards of ethics with all information Works with privileged information in a conscientious manner while releasing medical records in an efficient, effective, and accurate manner Alerts supervisor to any connectivity problems, malfunctions of software or computer/office equipment, or security risks in work environment Must adhere to all VRC policies and procedures. Completes required training within the allotted timeframe Creating invoices and billing materials to send to our clients Ensuing that client information details are kept up to date All other duties as assigned. Requirements Minimum Knowledge, Skills, Experience Required High School Diploma (GED) required; degree preferred Prior experience with ROI fulfillment preferred Demonstrated attention to detail Demonstrated ability to prioritize, organize, and meet deadlines Demonstrated documentation and communication skills Demonstrated ability to maintain productivity and quality performance Basic knowledge of medical records and the Health Insurance Portability and Accountability Act of 1996 (HIPAA) preferred Prior experience with EHR/EMR platforms preferred Prior experience with Windows environment and Microsoft Office products Displays strong interpersonal skills with team members, clients, and requestors Must have strong computer skills and Microsoft Office skills Prior experience with operations of equipment such as printers, computers, fax machines, scanners, and microfilm reader/printers, etc. preferred Must be detailed oriented, self-motivated and can stay focused on tasks for extended periods of time. Must be able to read, write, speak, and comprehend English. Bilingual skills are desirable.
Posted 1 week ago
CONTACT GOVERNMENT SERVICESFairfax, VA
$92,213 - $125,147 / year
ISSO Employment Type: Full-Time, Experienced Department: Information Technology CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you'll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements. CGS brings motivated, highly skilled, and creative people together to solve the government's most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success: Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades. Maintain responsibility for managing cybersecurity risk from an organizational perspective. Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership. Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies. Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO). Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes. Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF. Provide subject matter expertise for cyber security and trusted system technology. Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems. Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&As), security test and evaluation reports, and security engineering practices and processes. Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring. Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems. Qualifications: Bachelor's Degree. A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc. eMASS experience. Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher. Strong desktop publishing skills using Microsoft Word and Excel. Experience with industry writing styles such as grammar, sentence form, and structure. Ability to multi-task in a deadline-oriented environment. Ideally, you will also have: CISSP, CASP, or a similar certificate is preferred. Master's Degree in Cybersecurity or related field. Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking. Demonstrated ability to work well independently and as a part of a team. Excellent work ethic and a high commitment to quality. Our Commitment: Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client's specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we've been growing our government contracting portfolio, and along the way, we've created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package. Health, Dental, and Vision Life Insurance 401k Flexible Spending Account (Health, Dependent Care, and Commuter) Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: https://cgsfederal.com/join-our-team/ For more information about CGS please visit: https://www.cgsfederal.com or contact: Email: [email protected] #CJ $92,213.33 - $125,146.66 a year We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Posted 30+ days ago
PwCAtlanta, GA
$150,000 - $438,000 / year
Industry/Sector Not Applicable Specialism General Tax Consulting Management Level Director Job Description & Summary At PwC, our people in finance consulting specialise in providing consulting services related to financial management and strategy. These individuals analyse client needs, develop financial solutions, and offer guidance and support to help clients optimise their financial performance, improve decision-making, and achieve their financial goals. As a finance consulting generalist at PwC, you will possess a broad understanding of various aspects of finance consulting. Your work will involve providing comprehensive guidance and support to clients in optimising their financial performance, improving decision-making, and achieving their financial goals. You will be responsible for analysing client needs, developing financial solutions, and offering recommendations tailored to specific business requirements. Translating the vision, you set the tone, and inspire others to follow. Your role is crucial in driving business growth, shaping the direction of client engagements, and mentoring the next generation of leaders. You are expected to be a guardian of PwC's reputation, understanding that quality, integrity, inclusion and a commercial mindset are all foundational to our success. You create a healthy working environment while maximising client satisfaction. You cultivate the potential in others and actively team across the PwC Network, understanding tradeoffs, and leveraging our collective strength. Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: Lead in line with our values and brand. Develop new ideas, solutions, and structures; drive thought leadership. Solve problems by exploring multiple angles and using creativity, encouraging others to do the same. Balance long-term, short-term, detail-oriented, and big picture thinking. Make strategic choices and drive change by addressing system-level enablers. Promote technological advances, creating an environment where people and technology thrive together. Identify gaps in the market and convert opportunities to success for the Firm. Adhere to and enforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance) the Firm's code of conduct, and independence requirements. The Opportunity As part of the Financial Markets Business Advisory team you provide guidance on global tax information reporting and withholding rules. As a Director, you set the strategic direction and lead business development efforts, focusing on impactful decision making and executive-level client relations. You drive business growth, shape client engagements, and mentor the future leaders while fostering an environment where people and technology thrive together. Responsibilities Providing guidance on global tax information reporting and withholding rules Leading efforts to develop new business opportunities Making critical decisions to influence client outcomes Managing and shaping client engagements Providing mentorship to emerging leaders Fostering a culture where technology and people excel together Overseeing various projects to confirm alignment with strategic goals Maintaining the firm's standards of quality and integrity What You Must Have Bachelor's Degree 8 years of experience CPA, Enrolled Agent or Active Member of the Bar What Sets You Apart Management Information Systems & Accounting, Accounting, Accounting & Finance, Taxation preferred Providing guidance to clients regarding compliance with global tax information reporting Researching complex tax issues and reaching valid conclusions Reviewing US IRS tax forms and related tax documentary evidence Leading staff in preparing and filing information returns Developing innovative technology solutions to increase efficiency Training and managing local staff Executing client engagements to meet statutory, regulatory, and project-based deadlines Proficiency in Microsoft Excel, Word, and PowerPoint Travel Requirements Up to 20% Job Posting End Date Learn more about how we work: https://pwc.to/how-we-work PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy . As PwC is an equal opportunity employer, all qualified applicants will receive consideration for employment at PwC without regard to race; color; religion; national origin; sex (including pregnancy, sexual orientation, and gender identity); age; disability; genetic information (including family medical history); veteran, marital, or citizenship status; or, any other status protected by law. For only those qualified applicants that are impacted by the Los Angeles County Fair Chance Ordinance for Employers, the Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, San Diego County Fair Chance Ordinance, and the California Fair Chance Act, where applicable, arrest or conviction records will be considered for Employment in accordance with these laws. At PwC, we recognize that conviction records may have a direct, adverse, and negative relationship to responsibilities such as accessing sensitive company or customer information, handling proprietary assets, or collaborating closely with team members. We evaluate these factors thoughtfully to establish a secure and trusted workplace for all. Applications will be accepted until the position is filled or the posting is removed, unless otherwise set forth on the following webpage. Please visit this link for information about anticipated application deadlines: https://pwc.to/us-application-deadlines The salary range for this position is: $150,000 - $438,000. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. All hired individuals are eligible for an annual discretionary bonus. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation, personal and family sick leave, and more. To view our benefits at a glance, please visit the following link: https://pwc.to/benefits-at-a-glance
Posted 1 week ago
AltamiraFairborn, OH
Altamira Technologies has a long and successful history providing innovative solutions throughout the U.S. National Security community. Headquartered in McLean, Virginia, Altamira serves the defense, intelligence and homeland security communities by focusing on creating innovative solutions leveraging common standards in architecture, data and security. Altamira believes that our people and the culture of our company differentiate us from other companies. Altamira is searching for an Information Security Analyst in Fairborn, OH. Information Security analyst to work in our IT Security team. You will monitor our computer networks for security issues, install security software, and document any security issues or breaches you find. To do well in this role you should have a bachelor's degree in computer science and experience in the information security field. Information Security Analyst Responsibilities: Monitor computer networks for security issues. Investigate security breaches and other cybersecurity incidents. Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs. Document security breaches and assess the damage they cause. Work with the security team to perform tests and uncover network vulnerabilities. Fix detected vulnerabilities to maintain a high-security standard. Stay current on IT security trends and news. Develop company-wide best practices for IT security. Perform penetration testing. Help colleagues install security software and understand information security management. Research security enhancements and make recommendations to management. Stay up-to-date on information technology trends and security standards. Information Security Analyst Requirements: Bachelor's degree in computer science or related field. Ability to get a security clearance or have one. Experience in information security or related field. Experience with computer network penetration testing and techniques. Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts. Ability to identify and mitigate network vulnerabilities and explain how to avoid them. Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.
Posted 5 days ago
First Horizon Corp.Memphis, TN
Position not eligible for sponsorship Locations: Onsite in Memphis, TN; Maryville, TN; Birmingham, AL; Lafayette, LA; New Orleans, LA; Charlotte, NC; Raleigh, NC; or Dallas, TX. Summary The Cyber Security Engineer - Threat Management is a mid-level Cyber Security Engineer responsible for second level security event/incident response along with the collection, analysis, and dissemination of cyber threat intelligence. These capabilities will include timely collection of advanced warning of impeding IT vulnerabilities or threats, a thorough correlation, analysis, and storage of threat intelligence information, and operational support of the incident response process. The candidate They will deliver and sustain the enterprise management strategy and solutions from a governance, process, discipline and technology standpoint, to support enterprise environments and our presence in various cloud instances and on-premises data centers covering threats / FIM / configuration management / incident response / vulnerability management. Secondary roles include IPS, EDR, TIP tools, and other information security solutions. Essential Functions of the Job: Responding to SOC alerts performing an analysis, and containment of security events. Provide tier II support for escalated security incidents. Support the Cyber Incident Response Team (CIRT) in the effective detection, analysis, and containment of attacks. Operate the configuration management program to track configuration drift over time, working with asset custodians to correct any configuration deviation from baseline. Operate the File Integrity Management program to track changes to file systems on critical systems. Operate the processes necessary to collect threat intelligence, analyze the data for patterns and actionable information, and create intelligence products for other teams to consume using MITRE ATT&CK Framework. Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents. Integrate appropriate systems and logs into the global threat management platform or Security Event and Incident Management system to properly protect critical assets. Design, test and develop specific content and alerting to identify threats against critical assets. Document incident response playbooks for new threat content and alerts. Maintain an understanding of attacks, vectors and emergent threats. Obtain and share cyber security intelligence with security partners, vendors and law enforcement as necessary. Produce weekly and monthly operational metrics. Work with vendors and internal customers to respond to escalations. Recommends Preventative Security Actions. Recommends Corrective Security Actions. Comprehension of basic banking systems. Job Requirements: High School Graduate or Equivalent. Bachelor's Degree Preferred but not required in Computer Engineering/Computer Science or related field. CISSP, GSEC, GCIH, CEH or other security certifications preferred, but not required. Three year minimum working in cyber threat or information security. Knowledge and Skills Requirements: Familiar with compliance regulations such as SOX, PCI-DSS, GLBA, and Federal Banking regulations. Proficient with cloud security and monitoring capabilities in Azure Proficient with Incident Response in Azure Proficient with configuration management scanning tools. Knowledgeable with Tripwire or other file integrity management tools. Excellent team skills and integrity in a professional environment. Ability to Map threats and vulnerabilities to MITRE. About Us First Horizon Corporation is a leading regional financial services company, dedicated to helping our clients, communities and associates unlock their full potential with capital and counsel. Headquartered in Memphis, TN, the banking subsidiary First Horizon Bank operates in 12 states across the southern U.S. The Company and its subsidiaries offer commercial, private banking, consumer, small business, wealth and trust management, retail brokerage, capital markets, fixed income, and mortgage banking services. First Horizon has been recognized as one of the nation's best employers by Fortune and Forbes magazines and a Top 10 Most Reputable U.S. Bank. More information is available at www.FirstHorizon.com. Benefit Highlights Medical with wellness incentives, dental, and vision HSA with company match Maternity and parental leave Tuition reimbursement Mentor program 401(k) with 6% match More -- FirstHorizon.com/First-Horizon-National-Corporation/Careers/Our-Benefits Follow Us Facebook X formerly Twitter LinkedIn Instagram YouTube
Posted 3 days ago
Freddie MacMclean, VA
$106,000 - $160,000 / year
At Freddie Mac, our mission of Making Home Possible is what motivates us, and it's at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: We are seeking a highly skilled and motivated individual to join our Seller/Servicer Information Security Risk Oversight (Cyber) team. In this key role, you will be responsible for evaluating and monitoring the information security risk profiles of third-party sellers and servicers. You will ensure compliance with all relevant regulatory requirements and play an active part in developing and supporting risk mitigation strategies to safeguard our organization. Our Impact: We are a specialized unit within the enterprise governance team, dedicated to providing strategic oversight of seller/servicer information security risk across Freddie Mac. Our team proactively manages third-party information risk through robust capability development, comprehensive program management, sophisticated reporting, and integrated systems. We lead the development, maintenance, and execution monitoring of seller/servicer information security risk programs, ensuring alignment with enterprise objectives. We are seeking a highly motivated and accomplished professional with exceptional organizational and strategic risk management skills, and a proven ability to cultivate strong partnerships across technology, business, and enterprise functions. Your Impact: In this role, you will enhance the seller/servicer information security risk oversight team's ability to effectively identify, assess, and mitigate risks that could impact Freddie Mac. Your involvement will strengthen the team's capacity to develop and execute strategic risk management initiatives, advance reporting and analytics, and ensure alignment with enterprise objectives. By fostering collaboration across technology, business, and governance functions, you will reinforce a culture of accountability and security, ultimately supporting Freddie Mac's commitment to the highest standards of information protection and trust with our partners and stakeholders. Conduct thorough risk assessments of seller/servicer information security practices, with a focus on data protection, cyber risk, and regulatory compliance. Develop and maintain robust frameworks and methodologies for overseeing and evaluating third-party information security risks. Collaborate with cross-functional teams-including IT, Legal, Compliance, and Enterprise Third Party Oversight (ETPO)-to identify, assess, and address risks associated with seller/servicer relationships. Monitor ongoing risk exposure and performance, delivering regular reports and actionable insights to senior management. Support the implementation of risk mitigation strategies and remediation plans for identified vulnerabilities. Stay abreast of industry trends, emerging threats, and regulatory changes affecting information security risk management. Lead or contribute to special projects aimed at enhancing the risk oversight program. Qualifications: Bachelor's degree in finance, Risk Management, Information Security, or a related field preferred. 5 - 7 years' experience in credit risk, information security risk management, or third-party risk oversight within the financial services sector. Strong understanding of regulatory frameworks (such as FFIEC, GLBA, GDPR) and industry standards (such as NIST, ISO 27001). Demonstrated expertise in conducting risk assessments and developing risk oversight methodologies. Outstanding analytical, communication, and interpersonal skills. Professional certifications (e.g., CISSP, CISM, CRISC, CRCM) are highly desirable. Keys to Success in this Role: The seller/servicer information security risk oversight (cyber) senior position is essential to Freddie Mac's commitment to protecting information and managing third-party risks. This role supports and empowers the cyber team to effectively identify, assess, and mitigate security risks associated with sellers and servicers, while maintaining the highest standards of information protection and trust with partners and stakeholders. Success in this role requires: Strategic vision to guide risk management initiatives and ensure alignment with enterprise objectives Strong organizational and time management skills to manage multiple priorities and meet critical deadlines Exceptional collaboration skills to build partnerships across technology, business, and governance functions Advanced analytical skills to evaluate risks and provide actionable insights Ability to drive program development and foster continuous improvement Flexibility and adaptability to thrive in a dynamic, evolving environment Current Freddie Mac employees please apply through the internal career site. We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. A safe and secure environment is critical to Freddie Mac's business. This includes employee commitment to our acceptable use policy, applying a vigilance-first approach to work, supporting regulatory mandates, and using best practices to protect Freddie Mac from potential threats and risk. Employees exercise this responsibility by executing against policies and procedures and adhering to privacy & security obligations as required via training programs. CA Applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Notice to External Search Firms: Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit www.BountyJobs.com and register with our referral code: MAC. Time-type:Full time FLSA Status:Exempt Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site. This position has an annualized market-based salary range of $106,000 - $160,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.
Posted 6 days ago
ZooxFoster City, CA
Zoox's internship program provides hands-on experiences with state of the art technology, mentorship from some of the industry's brightest minds, and the opportunity to play a part in our success. Internships at Zoox are reserved for those who demonstrate outstanding academic performance, activities outside their course work, aptitude, curiosity, and a passion for Zoox's mission. In this Role, You will collaborate with the ISG team to support the following areas: Governance Operations: Support day-to-day governance operations related to policies, standards, procedures, security requirements, and associated documentation. Data & Reporting: Assist in the collection and management of data from multiple systems to help report on Information Security program effectiveness through risk analysis and trends. Documentation: Help collect data, compose reports, and draft or improve information security policies, standards, technical implementation guidelines, and job aids. Core ISG Practices: Participate in one or more of ISG's core practices, including Policies & Standards, Risk Management, Third Party-Risk Management, and Information Security Awareness & Training. Stakeholder Engagement: Work alongside business partners and stakeholders to gather relevant input for company documentation and learn how to securely enable the business. Requirements Currently working towards a B.S., M.S., Ph.D., or advanced degree in an Information Security, Cybersecurity, Business Administration, Information Systems, or a related field program Good academic standing Able to commit to a 12-week internship beginning in May or June of 2026. At least one previous industry internship, co-op, or project completed in a relevant area Ability to relocate to the Bay Area, California for the duration of the internship Interns at Zoox may not use any proprietary information they are working on as part of their thesis, any published work with their university, or to be distributed to anyone outside of Zoox Technical Qualifications Framework Knowledge: Basic understanding of, or a strong desire to learn, information security frameworks such as NIST 800-53, NIST-CSF, ISO 27001, and CIS controls. Risk & Privacy: Fundamental knowledge of risk management, security, and privacy practices. Communication: Strong written and verbal communication skills, with the ability to articulate complex concepts clearly. Technical Skills: Familiarity with standard office productivity tools; familiarity with the administration and operation of GRC tools is a plus. Compliance: Classroom or project exposure to SOC2 and Trust Service Criteria assessments is preferred but not required. Bonus Qualifications An ideal candidate who is organized, detail-oriented, and eager to understand how to apply security governance in a real-world environment. A proactive learner willing to support internal stakeholders and provide consultations under the guidance of senior team members. The monthly salary range for this position is $5,500 to $7,500. Compensation will vary based on geographic location and level of education. Additional benefits may include medical insurance, and a housing stipend (relocation assistance will be offered based on eligibility). We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Posted 4 days ago
DLA PiperReston, VA
$92,637 - $134,438 / year
DLA Piper is, at its core, bold, exceptional, collaborative and supportive. Our people are the backbone, heart and soul of our firm. Wherever you are in your professional journey, DLA Piper is a place you can engage in meaningful work and grow your career. Let's see what we can achieve. Together. Summary The Senior Information Security Analyst is responsible for identifying, investigating, and addressing both internal and external threats. In this position, the candidate requires a deep understanding of various threats, attacks, and malware to develop effective detection and protection measures for the enterprise. As the Senior Information Security Analyst, you will collaborate with the IT department to maintain security controls, which includes tuning detection systems, updating control policies, and automating processes. Additionally, this role involves directly managing relationships with our security operations vendors and providing technical leadership and mentorship to a team of security analysts. You will play a critical role in driving initiatives for advanced threat detection, incident response, and vulnerability management, which are vital for maintaining a proactive and robust security posture. The ideal candidate will combine extensive technical expertise in Security Operations (SecOps) with proven leadership skills, enabling them to enhance our security strategy and effectively respond to the evolving threat landscape. Location This position can sit in our Washington DC, Atlanta, Austin, Baltimore, Tampa, Chicago, or Northern Virginia office and offers a hybrid work schedule. Responsibilities Mentoring and guiding Information Security Analysts. Responsible for evaluating the effectiveness of and improving various information security program functions at the Firm. Reviewing Security Incident and Event Management (SIEM) systems, which include regular reporting of metrics and summaries regarding ongoing investigations and ticket tracking, Performing alert triage, which involves investigating and analyzing security incidents, identifying root causes, and developing appropriate mitigation strategies. Ensuring effective Endpoint Threat Detection, including EDR capabilities, traditional antivirus, asset management, and familiarity with baseline and configuration management tools. Managing Next Generation Firewalls and/or Intrusion Detection/Prevention Systems (IDS/IPS). Engaging in Threat Hunting and utilizing Threat Intelligence. Utilizing malware sandbox technologies and interpreting the results. Overseeing Incident Response tools, processes, and capabilities. Possessing experience or a deep understanding of vulnerability and configuration management. Conducting independent project work. Desired Skills Communication Skills: Proficient in both verbal and written communication, with the ability to convey technical information to non-technical audiences. Analytical Skills: Strong analytical abilities with keen attention to detail, essential for identifying and addressing security events. SIEM Proficiency: Skilled in identifying, triaging, and analyzing security events using Security Information and Event Management systems. Incident Response Knowledge: Deep understanding of incident response processes and methodologies. Scripting Experience: Familiarity with scripting languages to automate security operations and enhance the incident response process. Attacker Methodology: Demonstrated understanding of the methodologies used by attackers, which supports proactive defense measures. Intrusion Detection: Solid grasp of intrusion detection systems, AI-based attack detection and prevention strategies, and SOC (Security Operations Center) operations. Cloud Security: Knowledge of cloud infrastructure and security considerations in a cloud environment. Core Infrastructure Knowledge: Familiarity with core infrastructure components such as DNS, Active Directory, and Exchange. Security Tools Experience: Prior experience with security tools like Microsoft Defender, CrowdStrike, and Palo Alto Networks is desirable. Professional Services Background: Experience in professional services sectors such as legal, finance, or consulting is preferred. These competencies are critical for effectively managing security operations and responding to incidents in a dynamic environment. Minimum Education Bachelor's Degree in Information Security, Cybersecurity or similar fields. Preferred Education Master's Degree in Information Security, Cybersecurity or similar fields. Certificates Professional-level industry certification (e.g. CISSP, GIAC, SANS, etc.) preferred. Minimum Years of Experience 7 years' working within Cybersecurity field. Essential Job Expectations While the specific job requirements of a DLA Piper position may vary depending upon scope of the job and area of specialty, there are certain universal requirements that are expected of all DLA Piper employees, which include but are not limited to: Effectively communicate, verbally and in writing, with clients, lawyers, business professionals, and third parties. Produce deliverables, answer phone calls, and reply to correspondence in an efficient and responsive manner. Provide timely, accurate, and quality work product. Successfully meet deadlines, expectations, and perform work duties as required. Foster positive work relationships. Comply with all firm policies and practices. Engage in both physical and sedentary activity, such as (a) working at a computer for extended periods of time, including on-screen reading and typing; (b) participating in digital/virtual conference calls; (c) participating in meetings as needed. Ability to work under pressure and manage competing demands in a fast-paced environment. Perform all other duties, tasks or projects as assigned. Our employees are expected to embrace and uphold our firm values as a part of our DLA Piper culture. We are committed to excellence in how we represent our clients and develop our people. Physical Demands Sedentary work: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met. Work Environment The individual selected for this position may have the opportunity for a hybrid work arrangement comprised of remote and in-office work, the requirement for which will be determined in coordination with the hiring manager or supervisor and may be modified in the firm's discretion in the future. Disclaimer The purpose of this job description is to provide a concise statement of the work elements and to organize and present the information in a standardized way. It is not intended to describe all the elements of the work that may be performed by every individual in this classification, nor should it serve as the sole criteria for personnel decisions and actions. The job duties, requirements, and expectations for this position may be modified at the Firm's discretion at any time. This job description does not change the at-will nature of employment. Application Process Applicants must apply directly online instead of sending application materials via email. Accommodation Reasonable accommodations may be made upon request to permit individuals with a disability to perform the essential functions and responsibilities of the position or to participate in the job selection process. If you have a request for an accommodation during the application process, please contact careers@us.dlapiper.com. Agency applications will not be considered. No immigration sponsorship is available for this position. The firm's expected hiring range for this position is $92,637 - $134,438 per year depending on the candidate's geographic market location. The compensation offered for employment will also be dependent on other factors including the candidate's experience, skills, educational and professional background, and overall qualifications. We offer a comprehensive package of benefits including medical/dental/vision insurance, and 401(k). #LI-SB1 #LI-Hybrid DLA Piper is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Job applicant poster viewing center.
Posted 30+ days ago
PwCTampa, FL
Industry/Sector Not Applicable Specialism General Tax Consulting Management Level Senior Manager Job Description & Summary A career within Financial Markets Business Advisory services, will provide you with the opportunity to contribute to a variety of audit, regulatory, valuation, and financial analyses services to design solutions that address our clients' complex accounting and financial reporting challenges, as well as their broader business issues. To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be a purpose-led and values-driven leader at every level. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future. As a Senior Manager, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to: Encourage everyone to have a voice and invite opinion from all, including quieter members of the team. Deal effectively with ambiguous and unstructured problems and situations. Initiate open and candid coaching conversations at all levels. Move easily between big picture thinking and managing relevant detail. Anticipate stakeholder needs, and develop and discuss potential solutions, even before the stakeholder realises they are required. Contribute technical knowledge in area of specialism. Contribute to an environment where people and technology thrive together to accomplish more than they could apart. Navigate the complexities of cross-border and/or diverse teams and engagements. Initiate and lead open conversations with teams, clients and stakeholders to build trust. Uphold the firm's code of ethics and business conduct. The Opportunity As part of the Financial Markets Business Advisory team you are expected to help clients comply with global tax information reporting and withholding rules. As a Senior Manager you are expected to lead staff in preparing and filing information returns, develop innovative technology solutions, and provide guidance to clients regarding compliance with complex tax issues. Responsibilities Lead staff in preparing and filing information returns Develop innovative technology solutions for compliance Provide guidance to clients on complex tax issues Maintain operational excellence and top-tier client interaction Leverage influence and proficiency to deliver quality results Guide teams in developing practical tax compliance solutions Oversee the implementation of compliance strategies for clients What You Must Have Bachelor's Degree 7 years of experience Certified Public Account (CPA), Enrolled Agent or Active Member of the Bar What Sets You Apart Degree in Accounting, Accounting & Finance, Taxation, Management Information Systems & Accounting preferred Providing guidance on global tax information reporting compliance Researching complex tax issues for client conclusions Reviewing US IRS tax forms and related documentary evidence Leading staff in preparing and filing information returns Developing innovative technology solutions for efficiency Creating educational resources for reporting and withholding requirements Training and managing local staff Understanding US tax rules and requirements Travel Requirements Up to 20% Job Posting End Date Learn more about how we work: https://pwc.to/how-we-work PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy . As PwC is an equal opportunity employer, all qualified applicants will receive consideration for employment at PwC without regard to race; color; religion; national origin; sex (including pregnancy, sexual orientation, and gender identity); age; disability; genetic information (including family medical history); veteran, marital, or citizenship status; or, any other status protected by law. For only those qualified applicants that are impacted by the Los Angeles County Fair Chance Ordinance for Employers, the Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, San Diego County Fair Chance Ordinance, and the California Fair Chance Act, where applicable, arrest or conviction records will be considered for Employment in accordance with these laws. At PwC, we recognize that conviction records may have a direct, adverse, and negative relationship to responsibilities such as accessing sensitive company or customer information, handling proprietary assets, or collaborating closely with team members. We evaluate these factors thoughtfully to establish a secure and trusted workplace for all. Applications will be accepted until the position is filled or the posting is removed, unless otherwise set forth on the following webpage. Please visit this link for information about anticipated application deadlines: https://pwc.to/us-application-deadlines The salary range for this position is: $124,000 - $335,000. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. All hired individuals are eligible for an annual discretionary bonus. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation, personal and family sick leave, and more. To view our benefits at a glance, please visit the following link: https://pwc.to/benefits-at-a-glance
Posted 1 week ago
Equinix, Inc.Dallas Infomart Office DAI, TX
$103,000 - $155,000 / year
Who are we? Equinix is the world's digital infrastructure company, shortening the path to connectivity to enable the innovations that enrich our work, life and planet. A place where tech thinkers and future builders turn bold ideas into breakthrough experiences, we welcome your unique perspective. Help us challenge assumptions, uncover bias, and remove barriers-because progress starts with fresh ideas. You'll find belonging, purpose, and a team that welcomes you-because when you feel valued, you're empowered to do your best work. Job Summary The Global Enterprise Information Security Program effectively manages the information security risks for Equinix. Responsible for information security policy and enforcement, information security projects and initiatives, management of information security incidents including SOC and SIEM operations, operations of firewalls and load balancing for enterprise, ITDC, SVC, and Data Center, operations of enterprise security infrastructure and applications, and regulatory security compliance including ISO, FISMA/FedRAMP, and PCI. The role also includes ownership and integration of secrets management platforms such as HashiCorp Vault to ensure secure handling of sensitive credentials and secrets across the enterprise. Responsibilities Security Architecture Collaborate with Product Management and cross-functional teams to gather requirements and translate them into technical specifications Analyze and evaluate the technical capabilities and limitations of various applications within the Security Platform Research best technologies to publish the Security Platform APIs and integrate secure secrets management using HashiCorp Vault Identify how to leverage the capabilities of the Security Platform and HashiCorp Vault to fulfill Service APIs securely Design and implement secure secrets lifecycle management strategies using Vault, including dynamic secrets, access policies, and audit logging Security Engineering Develop the API layer, including orchestration components, security controls, and integration with HashiCorp Vault for secrets management Deliver fully functional APIs that leverage existing Security Platform and Vault optimally, ensuring SLA & SLO adherence and monitoring Conduct thorough testing and validation of APIs and Vault integrations to ensure reliability, performance, and security Implement Vault authentication methods (e.g., AppRole, Kubernetes, AWS IAM) and manage Vault namespaces and policies Security Operations Operate and troubleshoot Security Platform APIs and HashiCorp Vault to ensure delivery of required services in adherence with published SLAs & SLOs Monitor Vault performance, availability, and audit logs to ensure secure and compliant operations Security Incident Response Investigate, research, and analyze security incidents, including those involving secrets exposure or Vault misuse Collaborate with SOC and engineering teams to remediate Vault-related incidents and improve secrets hygiene Leadership Characteristics Is a transformational member of the team who excels at driving bold and meaningful change at scale and across multiple dimensions Cultivates Innovation- Creates new and better ways for the organization to be successful Fosters a climate where innovation can thrive. Encourages innovative risk taking and embraces failure as a part of innovation Qualifications BS in computer science or equivalent with 3+ years or MS in computer science or equivalent with 1+ years of hands on professional experience Experience in performing software threat analysis, security analysis and risk analysis Experience with development in Java or .NET and Python (any additional language will be a plus) Real-world experience with CI/CD i.e. GitHub Actions Deep understanding of security technologies, protocols, and best practices Experience with HashiCorp Vault including deployment, configuration, policy management, and integration with enterprise systems Understanding of RESTful APIs, containerization, API gateway, service orchestration, IAM security protocols, and secrets management Skills & Attributes Enthusiasm for collaborating cross-functionally and cross-product to identify and lead the development of the API platform and secrets management strategy Excellent communication skills and cross-functional organizational ability to influence others Ability to prioritize platform requirements, influence roadmap and strategy, and drive impact with business stakeholders Strong technical skills and experience, especially in secure software development and secrets management Extraordinary written and communication skills, having worked with executive management Passion for providing technical guidance and mentorship to junior engineers and team members The targeted pay range for this position in the following location is / locations are: United States- Dallas Infomart Office DAI : 103,000 - 155,000 USD / Annual Our pay ranges reflect the minimum and maximum target for new hire pay for the full-time position determined by role, level, and location.The pay range shown is based on our compensation structure in place at the time of posting and may be updated periodically based on business needs. Individual pay is based on additional factors including job-related skills, experience, and relevant education and/or training. The targeted pay range listed reflects the base pay only and does not include bonus, equity, or benefits. Employees are eligible for bonus, and equity may be offered depending on the position. Equinix Benefits As an employee, you become important to Equinix's success. We ensure all your benefits are in line with our core values: competitive, inclusive, sustainable, connected and efficient. We keep them competitive within the current marketplace to ensure we're providing you with the best package possible. So, wherever you are in your career and life, you'll be able to enhance your experience and bring your whole self to work. Employee Assistance Program: An Employee Assistance program is available to all employees. US Benefits: - Insurance: You may enroll in health, life, disability and voluntary plans that are designed for you and your eligible family members.- Retirement: You and Equinix may contribute to a retirement plan to help you plan for your financial future.- Paid Time Off (PTO) and Paid Holidays: You will receive an accrued amount of PTO each pay period along with various paid holidays for you to rest and recharge. Eligibility requirements apply to some benefits. Benefits are subject to change and may be subject to specific plan or program terms. Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form. Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.
Posted 30+ days ago
CONTACT GOVERNMENT SERVICESWashington, DC
$65,000 - $85,000 / year
Records Information Manager IV Employment Type: Full-Time, Experienced Department: Office Support CGS is seeking an experienced Records Information Manager to provide technical, management, and documentation support for a large Federal agency initiative. CGS brings motivated, highly skilled, and creative people together to solve the government's most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success: Supervising other staff members in support of the Records Information Manager V Provides technical support for records management programs, dockets, records center, or other information service under the supervision of a Records Information Manager V. May assist in planning and program development, analysis of records or docket management problems, and design of strategies to meet ongoing records or docket management problems, and design of strategies to meet ongoing records or docket management needs. Specific technical duties may vary according to the needs of the work site and include, but are not limited to, response to inquiries; collection maintenance and retrieval tasks; metadata review and input; equipment maintenance; and use of automated information systems, such as the Federal Docket Management System (FDMS). This position supports RIM Education and/or Experience Qualifications: At Level IV, the personnel must have at least seven (7) years of records management experience. Experience with at least one automated information system is required. A college degree is preferred but not required. Our Commitment: Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client's specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we've been growing our government-contracting portfolio, and along the way, we've created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package. Health, Dental, and Vision Life Insurance 401k Flexible Spending Account (Health, Dependent Care, and Commuter) Paid Time Off and Observance of State/Federal Holidays Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: https://cgsfederal.com/join-our-team/ For more information about CGS please visit: https://www.cgsfederal.com or contact: Email: [email protected] #CJ $65,000 - $85,000 a year We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Posted 30+ days ago
Director Of Information Security & Assurance
Seneca ResortsNiagara Falls, NY
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Job Description
The Director of Information Security & Assurance (ISA) is responsible for establishing and maintaining an enterprise-wide information security program to support the confidentiality, integrity and availability of Seneca Gaming Corporation's information assets. The Director of ISA collaborates and consults with IT management and business units to develop appropriate security controls. The Director leads the development of information security policies, procedures, and best practices and works with internal and external teams to implement and promote compliance with those procedures, best practices and/or regulatory compliance requirements. The Director of ISA is responsible for the development of an information security & assurance strategy within the context of a risk-based approach. This position is responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements. This position requires a visionary leader with strong leadership skills, business acumen and technology. The Director of ISA will work proactively with business units to implement practices that meet defined policies and standards for information security lead IT risk management activities.
The Director will report directly to the CIO and provide guidance for all Information Technology Security and Assurance concerns. The Director will also have an indirect reporting relationship to the SGC Audit Committee for audit compliance services.
ESSENTIAL FUNCTIONS AND RESPONSIBILITIES:
Works in close partnership with VP of Information Technology / CIO to ensure coordinated and effective information security operations across all systems and platforms.
Works closely and collaborates with Technical Services, Systems, Network, Operations, Applications and Support teams to ensure alignment between the information security and the enterprise information technology architecture, thus coordinating the strategic planning implicit in these architectures.
Leads and oversees the daily operations of the information security & assurance department and develops programs and best practices on information security domains such as access control, telecommunications and network security, risk analysis and security governance, security architecture, cryptography, operational security, application security, and business continuity/disaster recovery.
Together with the CIO, develops, implements, and monitors, a strategic, comprehensive enterprise information security and risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization.
Manages the enterprise's security organization, consisting of direct reports and indirect reports and leads all hiring, training, staff development, performance management and annual compensation reviews.
Identifies legal, regulatory, organizational and other requirements and provides recommendations for managing the risk of non-compliance. Identifies gaps between current and desired risk levels.
Develops and communicates organizational information security policies and standards.
Leads the development of and provides management oversight for the information security operating and capital budgets and monitors for variances.
Creates and manages information assurance and risk management awareness training programs for all employees and approved system users.
Acts as the liaison between Internal Audit, Legal, Human Resources and Compliance Departments providing leadership and oversight for audit and information assurance activities.
Works directly with the business units to analyze information security risks and recommends appropriate risk treatment options to manage risk to acceptable levels.
Provides subject matter expertise to executive management on a broad range of information security standards and best practices, such as CIS, NIST, NIGC MICS, PCI DSS, COBIT, ITIL.
Provides strategic and tactical security guidance for all IT projects, including the evaluation and recommendation of technical controls.
Creates and facilitates the information assurance risk assessment process, including reporting and oversight of remediation efforts to address negative findings.
Collaborates on the development of a secure information technology infrastructure that provides reliable, resilient, responsive and secure enterprise information technology services.
Manages security incidents and events to protect corporate IT assets, including intellectual property, fixed assets and the company's reputation.
Coordinates the use of external resources involved in the information assurance program, including, but not limited to, interviewing, negotiating contracts and fees, and managing external resources.
Assists in the development of effective disaster recovery policies and procedures.
Develops business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the maturity of the security program.
QUALIFICATIONS/REQUIREMENTS:
Education/Experience:
Must be 18 years of age or older upon employment.
Bachelor's Degree in an Information Technology related field.
Minimum of ten (10) years of experience in an Information Technology management role with a combination of information technology and demonstrable information security and assurance responsibilities.
Minimum of five (5) years in Information Technology project management, systems design and integration and experience leading project teams using formal project management methodologies
A level of pertinent security/risk-focused certification, e.g. Security+, CISSP, CISM, CISA, CRISC.
An equivalent combination of education and/or experience may be substituted for the above requirements.
A deep understanding of and extensive experience with implementing network operating systems, systems design and enterprise architecture, systems development lifecycle (SDLC), project management methodology, asset management, access control systems, network communication protocols and topology, security engineering, public key infrastructure and identity and access management concepts.
Experience with security/risk-specific program/program component development, e.g. information security governance & continuous improvement, security awareness, vulnerability management, data protection, endpoint protection, identity & access management, cryptography & key management, business continuity/disaster recovery, incident response.
Direct experience with IT-based audit processes.
Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
Must be a critical thinker with strong problem-solving skills.
Knowledge of technological trends and developments in the area of information assurance and risk management.
Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals.
Knowledge of security and control frameworks, such as CIS, NIST, NIGC MICS, PCI DSS, COBIT, and ITIL.
Experience with contract and vendor negotiations.
High level of personal integrity and ethical standards and the ability to professionally handle confidential matters and exemplify the appropriate level of judgment and maturity.
High degree of initiative, dependability and ability to work with little supervision.
Must possess and maintain a valid driver's license and be able to substantiate a safe driving record within the parameters acceptable to our liability insurance carrier.
Language Skills and Reasoning Ability:
Must possess excellent communication skills: listening, writing, speaking, and interpersonal skills.
Must have the ability to speak effectively to the public, employees, customers and vendors.
Must have the ability to deal effectively and interact well with the customers, vendors and employees.
Must have the ability to resolve problems/conflicts in a diplomatic and tactful manner.
Physical Requirements and Work Environment:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderately loud. When on the casino floor, the noise levels increase to loud. Must be able to work in an environment where smoking is permitted.
Must be able to stand, walk, and move through all areas of the casino.
Maintain physical stamina and proper mental attitude to work under pressure in a fast-paced, casino environment and effectively deal with customers, management, employees, and members of the business community in all situations.
Salary Starting Rate:
$143,936.95
Compensation is negotiable based on experience and education.
Each position has varying minimum qualifications. In the absence of fully qualified candidates, some requirements may be waived.
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.