Job details
Job type full-time
Full job description
Overview:
Public consulting group, inc(pcg) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve livesFounded in 1986 and headquartered in boston, massachusetts, pcg has over 2,500 professionals in more than 60 offices worldwidePcg’s technology consulting practice offers a full spectrum of quality information technology (it) services to help state and local government agencies at every stage of the it life cycleThrough its specialized it services, pcg’s technology consulting team finds cost-effective ways to help agency partners deliver successful it systems that enhance the lives of the user baseTo learn more, visit https://www.publicconsultinggroup.com/technology-consulting/
Responsibilities:
Performs security assessments of information technology (it) systems to verify they comply with applicable security standards.
Performs reviews and assessments of organizational security controls (policies, processes, configurations) to verify they comply with applicable security standards.
Coordinates and/or conducts penetration testing or simulates attacks to look for vulnerabilities in systems before they can be exploited.
Coordinates with client organizations (state departments and federal agencies) to perform security audit activities.
Prepares reports that document findings from security assessments and testing.
Advises project managers of security and privacy requirements required by state and federal agencies.
Assists with development and implementation of security standards and best practices.
Interfaces with various architects, technicians, and business leaders to understand organizational needs, capabilities, and constraints related to it security.
Researches the latest it security trends.
Learns and adapts to new technologies in the ever-changing world of information security.
Creates and documents security and privacy policies, procedures, or contractual language, as required.
Recommends security enhancements.
Qualifications:
Excellent interpersonal, verbal and written communication, including good presentations
Can multi-task, communicate clearly, learn new technologies and processes, and provide support to process/solution owners
Strong analytical and conceptual skills
Ability to thrive in various hierarchical situations
Self-motivated and quick learner
Pays close attention to detail
Ability to work within high-performing virtual teams and highly collaborative
Builds excellent relationships with key internal resources based on trust and confidence
Interested in both short-term results and long-term goals
Ability to work with resources in multiple locations and business units
Ability to get results while maintaining a service orientation
Broad knowledge and experience in project management methodologies including waterfall and agile (scrum & kanban).
Devops experience and automated deployment of applications
Experience in working state and federal government agencies
Experience in working with and communicating with technical staff and subject matter expert
Experience with databases and sql
Experience with penetration testing
Education: b.sOr b.aDegree is a plus, with related business discipline experience.
Experience: 1+ year of experience in information security or information risk managementGeneral operating knowledge of security for application and infrastructure, security threat/risk/data classificationFamiliarity with industry standards nist-800, hipaa, hitech, ferpa and various security protocols, such as pki, ssl, encryption, data redacting, dlpFamiliarity with fireeye, qualys, email security systems, dlp, data encryption antivirus, siem (log analysis), irs publication 1075, and minimum acceptable risk standards for exchanges (mars-e) a big plus3+ years managing or developing it systems/solutions
Understanding of various systems, like ms active directory, ms windows, ms exchange, unix/linux os.
Certification: information security professional certifications such as ceh, cissp, sans, cisa, giac or similar are highly desired
#li-ah1 #d-pcg eeo statement:
Public consulting group is an equal opportunity employer dedicated to celebrating diversity and intentionally creating a culture of inclusionWe believe that we work best when our employees feel empowered and accepted, and that starts by honoring each of our unique life experiencesAt pcg, all aspects of employment regarding recruitment, hiring, training, promotion, compensation, benefits, transfers, layoffs, return from layoff, company-sponsored training, education, and social and recreational programs are based on merit, business needs, job requirements, and individual qualificationsWe do not discriminate on the basis of race, color, religion or belief, national, social, or ethnic origin, sex, gender identity and/or expression, age, physical, mental, or sensory disability, sexual orientation, marital, civil union, or domestic partnership status, past or present military service, citizenship status, family medical history or genetic information, family or parental status, or any other status protected under federal, state, or local lawPcg will not tolerate discrimination or harassment based on any of these characteristicsPcg believes in health, equality, and prosperity for everyone so we can succeed in changing the ways the public sector, including health, education, technology and human services industries, work.
