Primary Responsibilities

• 1) Assess risk, evaluate security , identify vulnerabilities and corrective actions, and review for compliance with security policies and practices.
• 2) Assist in monitoring and maintaining network and/or host intrusion detection systems, and participate as needed in security event response processes.
• 3) Review and approve firewall, VPN and other security changes.
• 4) Participate in the selection and implementation of technologies and security solutions.
• 5) Coordinate/oversee third party security reviews, penetration testing, and consulting projects as necessary.

Required General Skills

• 1) Excellent verbal and written communication skills, including technical/non-technical communication, documentation and presentations.
• 2) Ability to assess risk and provide innovative solutions balancing security and business requirements.
• 3) Strong planning, organization and time management skills with the ability to handle multiple projects without direct supervision.
• 4) Ability to work independently, to follow a work plan, meet project milestones, and interact with various levels of management.
• 5) Energetic team player with strong initiative, team orientation, and excellent problem solving skills.

General Qualifications

Degree Preference: Bachelor’s or greater degree preferred, emphasis in Information Systems/Computer Science.
Certification Requirement: Network or security -related certifications a plus (ex., CISSP, etc.).

Responsibilities:

• Oversee a network of security directors and vendors who safeguard the company’s assets, intellectual property and computer systems, as well as the physical safety of employees and visitors.
• Identify protection goals, objectives and metrics consistent with corporate strategic plan.
• Manage the development and implementation of global security policy, standards, guidelines and procedures to ensure ongoing maintenance of security. Physical protection responsibilities will include asset protection, workplace violence prevention, access control systems, video surveillance, and more. Information protection responsibilities will include network security architecture, network access and monitoring policies, employee education and awareness, and more.
• Maintain relationships with local, state and federal law enforcement and other related government agencies.
• Oversee incident response planning as well as the investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches as necessary.
• Work with outside consultants as appropriate for independent security audits.

Qualifications:

• Must be an intelligent, articulate and persuasive leader who can serve as an effective member of the senior management team and who is able to communicate security-related concepts to a broad range of technical and non-technical staff.
• Should have experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation.
• Must have strong working knowledge of pertinent law and the law enforcement community.
• Must have a solid understanding of information technology and information security.

More about CSO

Duties:

Develops and maintains web site architecture and infrastructure using state of the art technology.

Designs and develops complete web sites including user interface, scripting, middle-tier components, database design.

Writes and deploys components to Application Server possiblely in a clustered environment.

Updates web site, customizing the content to specifications while adhering to the defined web design.

Maintains current knowledge of Internet technologies and trends. Researches, evaluates, and demonstrates various web sites and new technology on a continuing basis.

Analyzes and tunes the web site performance. Recommends any beneficial or necessary changes to the web site.

Answers or forwards to management any web site-related e-mail questions from users.

Communicates with other personnel regarding technical requirements of web site and upcoming projects or events related to web site.

Keeps all content strictly confidential, setting unique permissions on sub-webs, hard coding text hyperlinks to drive users to SSL encryption, enforcing functioning java security measures, and immediately troubleshooting problems in issues of web site security compromise.

Provides technical support and participates in employee web site training.

Refreshes web site content to ensure accuracy and timeliness of information and images.

Collaborates with external vendors on special web site events, promotions marketing campaigns, or specific design projects.

Correspondence with and assistance to Companies clients. This includes quickly responding to the website e-mail, troubleshooting problems, changing passwords on request, helping the client work with and understand web products, and fix any errors immediately.

Requirements:

This position plans, develops, implements, maintains, and creates a well-structured web site using HTML, PHP, CSS, and Java or Microsoft based technologies and RDBMS database.

· Must have experience using and administering J2EE Application Server as well as writing and deploying components to the server.

· Must be knowledgeable in Web Server technologies, and have be proficient in web site management using IIS Web server. Experience in alternate HTTP servers is a plus.

· Must be proficient in advanced web site and web service development using (JSP, JavaScript, CSS, SSL, XML, XSLT, Java, Perl, CGI, DHTML). Flash and Shockwave experience is considered favorably.

· Experience creating dynamic web pages using relational database backend, with experience in writing stored procedures for MS SQL Server.

· Must maintain knowledge of the “state-of-the-art” in the rapidly changing web technologies.

· Must posses a working understanding of all facets of web development, strategies, design and implementation.

· Must be proficient in HTML using fundamental page layout techniques using frames, tables, Cascade Style Sheets, and other non-graphical design solutions.

· Must have the ability to maintain HTML pages using simple text based editors like notepad.

· Must understand Internet content fundamentals of, basic graphic design, image compression, cross browser compatibility, and bandwidth issues.

· Strong interpersonal and communication skills, both written and verbal are a must

· Ability to work within a team.

DEGREE LEVEL ATTAINED
BS Degree Computer Science or related fields.

EXPERIENCE
3-5 Yrs Exp prefered

Skills:

ANALYZE
APPLICATION SERVERS
BROWSER
CASCADING STYLE SHEETS
CASE TECHNOLOGIES
CGI
CODING
COMMUNICATION SKILLS
CONTINUING CARE
DHTML
FLASH WEB DEVELOPMENT
GRAPHIC DESIGN
GRAPHICAL DESIGN
HTML
HTTP
IIS
IMPLEMENTATION
INTERNET
INTERPERSONAL
JAGUAR
JAVA/J2EE
JAVASCRIPT
JSP
KNOWLEDGE OF STYLE
MANAGEMENT TRAINING
MS SQL SERVER
PERL
PORTAL
RELATIONAL DATABASE
RESEARCH
SERVERS
TECHNICAL SUPPORT
TROUBLESHOOTING SKILLS
USER INTERFACE
WEB DESIGN
WEB PAGES
WEB SERVER
WRITTEN AND ORAL
XML
XSL

• data remains consistent across the database;
• data is clearly defined;
• users access data concurrently, in a form that suits their needs;
• there is provision for data security and recovery control (all data is retrievable in an emergency).

For example, an estate agent may be able to view details of properties/clients and branch contact details. However, making local amendments to details and viewing sensitive data on fellow employees will depend on access permissions and privileges.
Typical work activities

The work of a database administrator (DBA) will vary according to the nature of the employing organisation and the level of responsibility associated with the post. Some of the work may involve specialising in database development or pure maintenance.

Typical responsibilities could include some or all of the following:

• establishing the needs of users;
• planning dataflows for a new or revised database;
• mapping out the ‘conceptual design’ for a planned database in outline;
• considering both ‘back end’ organisation of data and ‘front end’ accessibility for end users;
• refining the ‘logical design’ so that it can be translated into a specific data model;
• further refining the ‘physical design’ to meet system storage requirements;
• testing new systems;
• maintaining data standards, including adherence to the Data Protection Act;
• writing database documentation, including data standards, procedures and definitions for the data dictionary (‘metadata’);
• controlling access permissions and privileges;
• training users;
• meeting users’ access requirements and resolving their problems;
• ensuring that storage, archiving, backup and recovery procedures are functioning correctly;
• capacity planning;
• working closely with IT project managers, database programmers and web developers;
• providing technical support for outdated ‘legacy’ systems;
• communicating regularly with technical, applications, and operational staff, to ensure the database integrity and security;
• commissioning and installing new applications.

Because of the increasing levels of hacking and sensitive nature of data stored, security has become an increasingly important aspect of the work.