Kgs Work Values

Daily Duties at Kgs:

What I was Hired to Do: - Evaluate customer's compliance with information security standards and report those results to customer CISO. - Test customer's IT vulnerabilities. - Evaluate threats and risks to customer's critical information assets. What I Ended Up Doing: - Led certification and accreditation effort for nine customer information systems across five states. Had to document all system components, the information being processed by each system, and the security controls in place to protect those systems (and the facilities housing those systems). - Conducted risk evaluation in preparation for major move of all system components (1000 physical servers, 5 library storage systems, and all network backbone components)from facilities in D.C., Maryland and Georgia to Plano, Texas and Florence, Kentucky. - Provided expert security opinions pertaining to new security architectures being implemented by customer at new locations to improve overall security posture of the nine information systems moved. Frequently briefed customer CISO and migration project lead on system risks and facility compliance issues and how to mitigate those risks. - Conducted annual penetration testing on the nine information systems under management. - Conducted annual compliance audits of nine information system boundaries.

What they like about Kgs:

A hiring company that offers alternative approaches to pay, performance bonuses, and/or equity in the firm is very attractive to you. You're generally less interested in working for an organization offering only traditional, salary-based compensation, one with limited opportunity to acquire equity in the firm, or one that does not actively promote skill development. In addition, you are more likely to choose a company that offers a variety of internal career options, with defined career paths. You view the learning of new skills and development of your expertise as key to your career advancement. These aspects of an organization may become even more important to you as you progress in your field, and are especially critical if you change career or occupation.

Tags

CISSP, CISO, Compliance, Governance, IT Audit, Information Security, CIO, Project Management, Program Management, Vulnerability Management, Risk Management, Threat Assessment, NIST SP 800-53, ISO 27001, SOX, COBIT, HIPAA, Penetration Testing

Skills

P&L responsibilities, Sales Support, Software Implementation, Requirements Analysis & Specification, Leadership , Experienced in evaluating and mitigating risks to information assets, facilities, and personnel., Proficient in identifying and evaluating the severity of threats to an organization, its personnel, information assets, and facilities. , Proficient in creating, disseminating and maintaining policies and procedures within an organization., Adept at leading vulnerability and penetration testing efforts against large diverse information system environments., Experience in all 10 domains of information security (CISSP certified), Experience with a broad range of data protection schemas employing various encryption methods., Proficient in developing security-in-depth architecture strategies for protecting information assets.

These are some of the questions we asked our climbers about their experiences with Kgs: