Security and Privacy Senior Consultant


Under its core purpose of "Building Value with Values," Crowe Chizek and Company LLC (www.crowechizek.com) provides innovative business solutions in the areas of assurance, benefit plan services, financial advisory, forensic services, performance services, risk consulting and tax consulting. Crowe Chizek, a Crowe Group LLP entity, was founded in 1942. One of the top 10 public accounting and consulting firms in the United States, Crowe also serves clients worldwide as a leading independent member of the Horwath International global professional services organization.
In the expanding IT universe, security extends far beyond the walls of your enterprise. Without secure locks, mission-critical infrastructure and data are at high risk of theft from inside and outside your organization.
Crowe Chizek and Company LLC has a proven framework to help organizations align information security with key business objectives. We assist our clients in Security Architecture, Identity and Access Management, Privacy and Compliance (e.g., Gramm-Leach Bliley Act, HIPAA, Payment Card Industry), and Application Security.
Some of our specific Security related services include:
â?¢ Security Strategy Development
â?¢ Implementation and Integration Services
o Identity Management
o Access Management
o Web Services Security
o Data Protection Services
â?¢ Network Security Reviews
â?¢ Attack and Penetration Assessments
â?¢ E-Business Planning and Pre-implementation Risk Assessments
â?¢ Secure Network Architecture and Design
â?¢ Enterprise Security Program Outsourcing
â?¢ E-Commerce Infrastructure
â?¢ Firewall and Web Server Configuration
â?¢ Secure Network Infrastructure and Migration
â?¢ Enterprise Security Management and Intrusion Detection
â?¢ Remote Access and Authentication Services
â?¢ Application Security
Responsibilities:

The Information Security Senior Consultant will be responsible for supporting planning, supervising staff, and executing IT Security and Privacy projects. The Information Security Senior Consultant will serve as a project or team lead to ensure high-quality delivery. This position will perform work, as well as oversee the technical work of some junior level personnel. This position will work directly with other project leads, managers, and/or executives to communicate business and technical aspects of the work being performed. The Information Security Senior Consultant will set performance expectations for junior level personnel and provide constructive performance feedback on a regular basis. This position may also assist the engagement economics of the projects, including budget status tracking, billing, and collection analysis. The Information Security Senior Consultant will perform the following responsibilities:

â?¢ Conduct and lead Information Security Projects.
â?¢ Evaluate and/or Implement IS solutions and controls to ensure data security and integrity for our clients.
â?¢ Prepare reports or other necessary documentation to detail results of evaluation and otherwise meet the objectives of the Project.
â?¢ Submit recommendations to client for corrective action or to support a recommend approach to solving the clientâ??s needs.
â?¢ Participate in planning and implementing of client information systems, including structure, process, and security.
â?¢ Participates in strategic and tactical objectives to include new product offerings, identify additional client needs, and generating new business leads.
â?¢ Correspond with a variety of clients and communicate security issues, recommendations, and deliverables effectively.


Requirements:

Minimum 2-4 years of business experience in the areas of Information Security. Experience within consulting or professional services, or at leading industry public companies is preferred. We require some prior experience supervising junior level resources in the areas of Information Security. This position requires national travel.

Demonstrated experience with:

To be successful, you should have knowledge of internetworking technology. System and network administration experience on UNIX (any flavor), Windows 2000/2003, and/or Novell platforms is essential.
Knowledge of security areas such as Auditing, Policy, Database Security, Firewall Design and Implementation, Risk Analysis, Identity Management, Access Management, or Web Services is very desirable. Writing and interpersonal communication skills are expected to be of a high quality. The ability to handle multiple projects concurrently is a must.

You should have a basic knowledge of some combination of the following technology areas:
â?¢ Network Security Practices: Auditing, planning, design, implementation, testing, and management
â?¢ Network Operating Systems: Windows NT, UNIX
â?¢ Internet/Intranet/Extranet: Network infrastructure development/deployment, DNS, FTP, and World
â?¢ Wide Web serv