Director, Information Security

• Overseeing the continuous monitoring and protection of information processing resources including Incident Response / Crisis Management. • Perform security administration duties (user access add, deletes and changes) consistent with security policy and procedures. • Work with Cleveland facilities to manage employee access and security (may include areas such as employee badge access, premise surveillance, and restricted area access) • Identify vulnerabilities that are applicable to systems, applications, and facilities. Determine their severity and urgency, work with owners to determine if and when corrective action will be taken, and perform necessary actions to verify that corrective actions were effective. • Developing and implementing policies, principles and guidelines related to information security and compliance. • Defining and implementing an ongoing information security and compliance risk assessment program, which defines, identifies, and classifies critical information assets, assesses threats, and vulnerabilities regarding those assets and implementing safeguard compliance recommendations. • Overseeing the development of corporate information security and compliance awareness training program. • Managing information security and compliance functions related to company information systems and data centers. • Conduct risk assessments, audits, system reviews and vulnerability scans. Use a combination of automated tools, manual methods, and interviewing techniques to gather the information necessary to report on security risks. Author written reports summarizing findings and recommendations. • Conduct security reviews on IT projects. Attend meetings and review documentation as needed in order to identify security requirements for new and ongoing IT projects. Design security solutions for new systems and applications. • Keeping abreast of current Information Security and Compliance best practices through research, by attending industry conferences, and through reading trade journals. • Develop criteria needed to assess the level of new/existing applications and/or technology infrastructure elements for compliance with enterprise security standards.BS/BA Information Technology/ Systems10 years Information experience preferred Location Cincinnati, OH 45201 Start Date: Thursday, August 21, 2008 About CIT A Leading Diversified Commercial Finance Company CIT is a leading global finance company, driving economic growth and creating opportunities for businesses and people around the world. Building on a century of experience, we provide innovative financial solutions and services-bringing knowledge, expertise and creativity to every client relationship. Learn more: www.cit.com. CIT Quick Facts Commercial Finance Company Founded - 1908 NYSE: CIT Russell 1000 index member Fortune 500 company A component of the S&P 500 Principal offices in: New York City & Livingston, New Jersey