Security audit/assessment

CGS is a privately held information technology services company that was founded in 1983 and is headquartered in New Jersey. CGS is recognized as a leading provider of IT professional staffing and end-to-end technology solutions to companies whose own vision is to be leaders in their respective fields.

CGS provides our clients with quality personalized staff augmentation, as well as infrastructure and application development solutions designed to meet their evolving needs and maximize the return on their investment.

We are looking for the following:
>>>>
• Maintain database standards related to security best practices balancing business needs with security risk.
• Assist in transition activities around database compliance monitoring
• Serve as subject matter expert in database security and design; coach and advise peers on technical activities.
• Assess security database controls, make recommendations, and develop mitigating controls.
• Participate in architecture design. Draw out customer requirements and participate in architecting infrastructure solutions. Seek information about the underlying needs of the customer, beyond those expressed, and either match these to available products or services or propose customized solutions. Lead interactive design sessions.
• Incorporate new ideas and knowledge of current trends and events in information security and technology to project the future business environment.

Minimum of 5 years of information security, IT, or database administration, preferably in the Pharmaceutical industry. This experience and skill set should include:

• Strong knowledge of industry security best practices. Professional certification as a Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) is preferred.
• The understanding of security controls in at least one of the following environments: Oracle, MS SQLserver, or MySQL (Sybase or DB2 a plus).
• Ability to solve complex technical problems. The use of a structured approach to isolating and diagnosing problems.
• The understanding of the database engineering role.

• Understands the current security risk assessment tool and question set
• Conducts risk assessments on high security risk applications. Documents all residual risk; provides security risk advice; gets business approval for remaining residual risk.
• Prepares operational metrics and trend analysis
• Provides training and awareness; keeps portal materials updated; performs training sessions as needed