Information Security Auditor
职位描述与柯克帕特里克普莱斯的就业机会 你是否感到丧，帮助那些不知道2层和7层潜水之间的区别的客户？你厌倦了解释说互联网只是一系列串连接大量数据的管道吗？如果是这样的话，那么不要......申请这个工作！柯克帕德里克普利斯帮助客户通过他们的第一次安全审计并激励他们获得更高水平的信息安全。柯克帕 特里克普雷斯正在寻找 IT 和安全知识熟练的审计人员，准备加入快速增长和变化的合规行业。我们希望团队的员工热衷于教育和赋予小型中型服务提供商有效控制来保护他们的资产。想要申请人特征性格 · 有极端水平的完整性。在美国最前1%的财富持有人认为完整性是解释经济成功的第一因素。· 热爱教客户有关适用的合规范，如 SOC1, SOC2, PCI,HIPAA,FISMA,GLBA,HITRUST,GDPR 和 ISO. 我们喜欢这个字母。· 始终表现出无与伦比的专业精神，行为和外观。铁你的衫！· 设计有效的检测标准。· 必须了解和解释风险如何影响各种商业环境。缺口分析，任何人？? · 将补救指导与个人际技能结合起来并理解为什么客户必须做必要的改变。没有人喜欢强迫审计师。·至少拥有 CISSP,CISA,QSA,GIAC 等一个证书。我们更喜欢这个字母！生产力 · 在不同阶段协调同时项目方面充满活力的。爱猫牧养经验，但不需要。· 有效技术。没有科技类动物。·愿意在全国各地旅行。我只要离开这家！（30%-40%出差）·必须厌恶每天到办公室的通勤。竞争对手将至少拥有当前的 CISSP 认证，并具有十年或更长的技术经验。他们将接触到信息安全审计功能，如果不是直接作为审计员，然后是受益者。他们将拥有强大的技术技能和人际技巧，有效评估客户信息安全实践，了解客户的视角，以及 c
查看英文原文
Job Description
Employment Opportunity with KirkpatrickPrice
Do you get frustrated helping clients who don't know the difference between Layer 2 and a 7-layer dip? Are you tired of explaining that the Internet is just a series of tubes tangled up with enormous amounts of data? If so, then DO NOT...apply for this job! KirkpatrickPrice helps clients through their first security audit and inspires them toward greater levels of information security.
KirkpatrickPrice is seeking IT and security-savvy auditors who are ready to join a rapidly growing and changing compliance industry. We want people on our team who are excited about educating and empowering small and medium service providers to implement effective controls to protect their assets.
Desired Applicant Characteristics
Character
- Possess an extreme level of integrity. The top 1% of wealth holders in America rate integrity as the #1 factor that explains economic success.
- Passionate for teaching clients about applicable compliance standards, such as SOC1, SOC2, PCI, HIPAA, FISMA, GLBA, HITRUST, GDPR, and ISO. We love this alphabet.
- Always display unparalleled professionalism, in conduct and appearance. Iron your shirt!
Quality
- Skillful in designing effective tests of controls.
- Must understand and interpret how risk affects a wide range of business environments. Gap analysis, anyone??
- Combine remediation guidance with interpersonal skill and an understanding of why clients must make necessary changes. Nobody likes a pushy auditor.
- Hold at least one certification such as CISSP, CISA, QSA, GIAC, etc. We love this alphabet even more!
Productivity
- Energetic about coordinating simultaneous projects at differing stages. Cat herding experience preferred, but not required.
- Efficient with technology. No technosaurs.
- Willing to travel nationwide. “I’ve just GOT to get out of this house!” (30%-40% travel)
- Must detest a daily commute to an office. Virtual office experience is a must. Some days, it’s fun to just stay in those superhero pajamas.
Competitive candidates will possess a current CISSP certification at a minimum, and a decade or more of technologist experience. They will have exposure to the auditing function of information security, if not directly as an auditor, then as a beneficiary of audits. They will possess both strong technical skill and interpersonal skill, to effectively evaluate client information security practices, understand the perspective of the client, and communicate clearly and openly with the client and their colleagues. They will also enjoy working with a great group of people who love what they do.
Job Type: Full-time
Compensation:
Full Time employment
$100,000-$120,000 + monthly bonus
Salary: $100,000-$120,000 + monthly bonusOriginally posted on Himalayas