Corporate Security Analyst
Description Research In Motion Limited® (RIM)® is a world leader in the mobile communications market and has a history of developing breakthrough wireless solutions. RIM's portfolio of award-winning products, services and embedded technologies is used by thousands of organizations around the world and includes the BlackBerry® wireless platform, the RIM Wireless Handheld™ product line, software development tools and software/hardware licensing agreements. RIM is seeking driven individuals who can take our wireless data products to the next level in the global wireless market. Are you ready to make a difference in the world of mobile communications with RIM? POSITION SUMMARY The Corporate Security Analyst supports the process of identfiying and managing organizational risk, by evaluating security controls through compliance audits, risk assessments and physical security assessments and other activities in a dynamic and fast-paced environment. Key responsibilties of the analyst include: - Conducting internal compliance audits in accordance with Corporate policies, ISO/IEC 27001:2005, applicable laws and regulations
- Conducting information systems assessments (Risk Assessments and Firewall Change Requests) including those associated with the development of new or significantly enhanced business solutions
- Evaluation of the adequacy of system design and internal control framework in meeting business, operational and control objectives
- Providing technical advice and/or consultation to those who install, administer, and update computer-based access control systems and other information systems (i.e. networks, systems, and applications)
- Identifying underlying causes of control weaknesses and provide practical recommendations for mitigation
- Acting as a security Subject Matter Expert to other RIM employees and business units
Qualifications ESSENTIAL SKILLS AND QUALIFICATIONS Experience conducting end-to-end risk and vulnerability assessments of both physical and electronic systems. - Must possess strong technical skills in some (but not necessarily all) of the following areas:
- General IT controls audit experience including risk analyses and control testing in the areas of Data centers, Backup and recovery, change management, and application logical access
- Windows & UNIX operating system audit or administration experience
- Database audit or administration
- WAN and LAN infrastructure audit or administration experience (including, Firewalls, Routers, Switches, configurations, Gateways, VPNs, and Wireless)
- Knowledge of information security management best practices and standards, specifically ISO 27001:2005 and other leading standards, e.g. NIST and COBIT
- Experience in conducting PCI DSS assessments (pre and post certification)
- Knowledge of Privacy legislation (EU Data Directive, PIPEDA) or experience in conducting Privacy Impact Assessments
- Strong analytical and problem solving skills
- Exceptional skills in written and oral communication, and teamwork
- Ability to provide consulting guidance to RIM groups related to Information Security
- Ability to analyze security related issues and propose solutions to solve complex problems
- Ability to work independently with limited direction at most times
- Proven ability to acquire, understand and incorporate business requirements into security solutions
- Well-developed influencing skills to obtain participation in the compliance process by internal and external personnel, or to implement actions to address identified compliance issues
- Degree or Diploma in Computer Science, Information Security or related discipline, or equivalent work experience. Post graduate degree an asset
- Preferred certifications, include: CISSP, CISA, CIPP/IT, ISA (PCI-DSS)
- BSI qualified auditor or similar with a security emphasis an asset
- Level is dependent on experience;
If you're driven to take wireless technologies to the next level, it's time you join the team at RIM. We offer a challenging environment that fosters creativity and rewards excellence. Employees also have use of our award winning BlackBerry! © 2011 Research In Motion Limited. All Rights Reserved. The BlackBerry and RIM families of related marks, images and symbols are the exclusive properties of Research In Motion Limited. RIM, BlackBerry, "Always On, Always Connected" and the "envelope in motion" symbol are registered with the U.S. Patent and Trademark Office and may be pending or registered in other countries. Job: Information TechnologyPrimary Location: Canada-Ontario-WaterlooOther Locations: United States-Georgia-Alpharetta, Canada-Ontario-Mississauga, Canada-Ontario-Ottawa, United States-Texas-IrvingHire Type*: Experienced (Regular)Travel: Yes, 5% of the time | Send this job to a friendSend this job description to a friend by email. All the relevant details will be included in the message.Send this job to a friend
|