SENIOR CONSULTANT - Rockville, MD, United States - Emagine IT

    Default job background
    Technology / Internet
    Description
    Emagine IT has an immediate need for a Senior Consultant to join our team in support of our ISO 27001 customers located in North Bethesda, MD, with remote availability

    Responsibilities include:

    • Provide our clients with advice and guidance to successfully achieve ISO 27001:2022 compliance
    • Prepare and complete documentation packages to include SOPs, policies, plans, templates, and manuals which address all ISO 27001:2022 requirements
    • Ability to produce customer documents like Statement of Applicability
    • Lead ISO 27001:2022 audits within various types of environments
    • Provide direction for scheduling, project sequencing, and resource management; assist with managing client expectations and performing project management
    • Prepare, review, and/or update, and maintain IT Security supporting artifacts; provide IT security guidance to Information System Owners
    • Identifying information security problems and challenges, researching and developing technical solutions to rectify them
    • Ensure cyber security policies are adhered to and that required controls are implemented
    • Validate ISMS security documentation to ensure control requirements are met
    • Author recommendations based on findings to improve security postures compliant with ISMS controls
    • Participate in client interviews to complete audits
    • Build a customer-focused relationship with client(s)
    • Collaborate across multiple internal teams to ensure successful delivery of results based on scope of work
    • Establish standards and procedures to minimize risks
    • Drive working sessions with client to ensure expectations and direction are aligned and timelines are being met
    • Demonstrate ability to lead projects through the project lifecycle from initiation to project closure

    Minimum Requirements:

    • 5-8 years of experience in either auditing or consulting
    • Strong ISO 27001:2022 knowledge and experience
    ISO 27701, ISO 20000, and ISO 9001 is a plus

    • Strong written and verbal communication skills including the ability to explain technical matters to non-technical audiences
    • Broad based IT background with a technical understanding of networks, protocols, security configurations, cryptography, identity and access management, and the systems development life cycle
    • Excellent communication skills, both written and verbal with strong presentation skills
    • Ability to interact with clients and represent Emagine IT in a professional manner
    • Ability to successfully manage multiple tasks
    • Serve as a mentor to Associate Security Consultants and Security Consultants on best practices
    • Team player able to work well with others in a collaborative manner and is a self-starter who can work with minimum supervision
    • Work to continually build and improve solid and well-rounded practices and processes

    Certification Requirements:

    • ISO 27001 Lead Auditor
    • CISSP
    • CISM
    • CISA AAP/EEO Statement Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status
    Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job
    Duties, responsibilities and activities may change at any time with or without notice
    Emagine IT is an information technology consulting services company that specializes in delivering technology solutions
    Our reputation reflects the high quality of the talented Emagine IT team and the consultants working in partnership with our customers
    Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions

    Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end users, and give our customers a competitive edge, now and into the future.