4+ years Information Security Governance, Privacy and Compliance and Security Assessment, experience, with a focus on IT and IS Risk Assessments and program reviews / establishment.
Familiarity with and demonstrated experience assessing against the BS ISO/IEC/SIG
27002:2005 BS 7799 standard domains, BS 25999 including Risk Assessment; Security policy; Organization of Information Security; Asset Management; HR Security; Physical and Environmental Security; Communications and Operations Management; Access Control; IS Acquisition, Development and Maintenance; IS Incident Management; Business Continuity Management; and Compliance.
Broad understanding of Information Security trends, services and disciplines and experience applying them in dynamic environments.
Soft Skills:
Strong client interaction skills, both written and verbal
Highly Fluent in English – verbal and written
Critical thinking, including questioning, digestion, thought process, and documentation of same.
Acute attention to detail.
Exceptional time management, including speed and ownership to drive closure and seek solutions.
Ability to effectively manage competing priorities.
Additional Qualification:
Prior consulting experience with big 4 or large clientele is preferable.