Description:
Join our team at the Minnesota Public Employee Retirement Association (PREA) as we seek a dedicated Security Advisory Consultant to provide essential security assessment and governance guidance. In this role, you will play a pivotal role in evaluating current security tools, processes, and posture, while offering ongoing support and recommendations for enhancements.
Key Responsibilities:
- Conduct comprehensive risk assessments to identify and prioritize cybersecurity risks.
- Develop and implement risk management strategies aligned with organizational goals.
- Create and maintain a cybersecurity program, establishing and enforcing security policies and procedures.
- Provide oversight and governance for the organization's cybersecurity program, ensuring compliance with regulations and standards.
- Develop and maintain incident response plans, leading or advising on incident response efforts during security incidents.
- Assess and manage security risks associated with third-party vendors, ensuring compliance with security and compliance requirements.
- Review and evaluate the organization's security architecture, recommending improvements to enhance overall security posture.
- Ensure compliance with industry standards, regulations, and legal requirements, staying informed about changes in compliance obligations.
- Document security incidents, investigations, and resolutions, analyzing incidents to identify root causes and areas for improvement.
- Evaluate and recommend security technologies and tools, staying abreast of emerging threats and cybersecurity solutions.
- Develop a long-term cybersecurity strategy aligned with business objectives, advising executive leadership on cybersecurity investments and priorities.
- Establish key performance indicators (KPIs) and metrics to measure the effectiveness of the cybersecurity program, generating regular reports for stakeholders.
- Conduct regular incident response simulations and testing, identifying areas for improvement in incident response capabilities.
- Continuously monitor and evaluate the cybersecurity landscape for emerging threats and best practices, providing knowledge transfer.
Desired Qualifications:
- Five (5) years of experience in the Security Advisory role.
- Two (2) engagements lasting more than six (6) months in a Network/IT Infrastructure/Cybersecurity Security Advisory role.
- Hold at least one of the following industry-recognized certifications:
CISSP (Certified Information Systems Security Professional) or
CISM (Certified Information Security Manager).
- Leadership and Strategic Vision for cybersecurity aligned with business goals.
- Decision-making abilities with a focus on balancing security needs with business objectives.
- Risk Management in addressing high-impact security risks effectively.
- Ability to communicate complex cybersecurity concepts to non-technical stakeholders and leadership.
- Incident Response and Crisis Management experience.
- Security Governance in establishing and maintaining security governance structures.
- Collaboration and Relationship Building with cross-functional teams.
- Interpersonal skills to work effectively with internal and external stakeholders.
- Technical proficiency in cybersecurity technologies, tools, and best practices.
- Awareness of emerging threats and trends in the cybersecurity landscape.
- Commitment to continuous learning and staying abreast of the latest cybersecurity trends, threats, and technologies.
- Analytical and Problem-Solving Skills to assess complex cybersecurity issues.
- Flexibility and Adaptability to evolving cybersecurity threats and organizational needs.
If you're an experienced Security Advisory Consultant seeking to contribute to a dynamic organization, we invite you to apply now. Join our innovative team and help safeguard critical systems and data. Send your resume and cover letter to admin@ipdav.net to be considered.
