RR Donnelley -
Downers Grove,
Illinois
7602
DESCRIPTION
Responsible for the planning, design, enforcement and audit of security policies and procedures which safeguard the integrity of and access to enterprise systems, files and data elements with a focus on our Latin America businesses. Responsible for acting on security violations. Maintains knowledge of changing technologies, and provides recommendations for adaptation of new technologies or policies. Recognizes and identifies potential areas where existing data security policies and procedures require change, or where new ones need to be developed, especially regarding future business expansion. Provides management with risk assessments and security briefings to advise them of critical issues that may affect customer, or corporate security objectives. Evaluates and recommends security products, services and/or procedures to enhance productivity and effectiveness. Oversees security awareness programs and provides education on security policies and practices. Position reports to the Director of Information Security
REQUIRED SKILLS
* Serves as an internal information security consultant to RR Donnelley, advising internal business units with current information about information security technologies, new security threats and security related regulatory issues. Focus on Latin America businesses.
* Manage RFP responses for Information Security audits from customers and initiate Information Security audits and protocols with vendors.
* Performs monitoring, periodic reports and reviews, and follow-up activities to ensure that the security systems are operational, effective and are in compliance with all policies and standards.
* Apply internal control concepts in a wide variety of information technology processes and appropriately assess the exposures resulting from ineffective or missing control practices.
* Oversees and/or audits the security of databases and data transferred both internally and externally.
* Within the area of assigned responsibilities, provides direct training to all employees, contractors, alliances, or other third parties, ensuring proper information access in accordance with established organizational information security policies and procedures
* Performs other related duties and participates in special projects as assigned.
Downers Grove, IL
Downers Grove, Illinois
|
|