contract in DC

From: Cindy Puente (cindy.puenteat_private)
Date: Thu Sep 05 2002 - 09:04:37 PDT

  • Next message: Joshua Heling: "Unix Software Developer (managed security products) - Madison, WI"

    Hi everyone
    
    I have more details on my analyst position.. so I wanted to send out an
    addendum to the previous email...
    
    I am looking for someone to work in an analyst capacity to ensure that our
    client  is in compliance with the Government Information Security Act.
    This person will review and evaluate previously established security system
    documentation which has been compiled according to the security act and will
    determine that the applications are working as stated in the security plans.
    
    Daily Tasks will include:
    reviewing documents
    discussing with the groups their specific security initiatives
    validating the information is accurate and following the gov't guidelines
    asking the appropriate questions to ensure the security plan, as defined, do
    meet the requirements of the government information systems security act
    
    The methodology will be provided - so the analyst in this position will not
    need to create his/her own methodology for this project. Will just perform
    the review of The Board's security plans and do the analysis to ensure the
    applications themselves are in compliance with the security act.
    
    This person does not have to be incredibly technical (it is not a hands on
    position at all).   Should understand the fundamentals of applications in
    order to understand if the security systems in place and proposed security
    systems will be compatible.
    
    This person will review plans, interview groups to discuss security needs
    (present and future) and establish that the systems are meeting security
    requirements.
    
    This position will run anywhere from 3 - 13 months (they are not certain how
    many systems they will be doing this with so they can't determine the
    project length just yet).
    
    The systems at The Board going to be reviewed are all automated systems -
    some are web-based applications (cold fusion, java, web sphere) others are
    mainframe (COBOL, SAS, CICS, DB2) - therefore, the candidate should know how
    to look for gaps in security of automated systems developed with this
    software.
    
    
    Requirements:
    MUST BE A U.S. Citizen.
    Must have excellent written communication skills
    Must have effective communication skills - will be interacting with several
    different groups The FRB
    
    This is not a network security position -it is an application security
    compliance analyst position.
    
    please send resume to:  cindy.puenteat_private and or feel
    free to call me at 1-800-433-8051 ext 229
    



    This archive was generated by hypermail 2b30 : Thu Sep 05 2002 - 14:56:32 PDT