Kgs Work Values

Daily Duties at Kgs:

What I was Hired to Do: - Evaluate customer's compliance with information security standards and report those results to customer CISO. - Test customer's IT vulnerabilities. - Evaluate threats and risks to customer's critical information assets. What I Ended Up Doing: - Led certification and accreditation effort for nine customer information systems across five states. Had to document all system components, the information being processed by each system, and the security controls in place to protect those systems (and the facilities housing those systems). - Conducted risk evaluation in preparation for major move of all system components (1000 physical servers, 5 library storage systems, and all network backbone components)from facilities in D.C., Maryland and Georgia to Plano, Texas and Florence, Kentucky. - Provided expert security opinions pertaining to new security architectures being implemented by customer at new locations to improve overall security posture of the nine information systems moved. Frequently briefed customer CISO and migration project lead on system risks and facility compliance issues and how to mitigate those risks. - Conducted annual penetration testing on the nine information systems under management. - Conducted annual compliance audits of nine information system boundaries.

What they like about Kgs:

Organizations with strong, centralized leadership are particularly attractive to you. You require a work environment with leadership that aggressively seeks to expand and grow the business and does so in a visible and decisive manner. In general you prefer to work in an environment in which there is a strong link between leadership, its actions, and a strong set of company-wide values.

Tags

CISSP, CISO, Compliance, Governance, IT Audit, Information Security, CIO, Project Management, Program Management, Vulnerability Management, Risk Management, Threat Assessment, NIST SP 800-53, ISO 27001, SOX, COBIT, HIPAA, Penetration Testing

Skills

P&L responsibilities, Sales Support, Software Implementation, Requirements Analysis & Specification, Leadership , Experienced in evaluating and mitigating risks to information assets, facilities, and personnel., Proficient in identifying and evaluating the severity of threats to an organization, its personnel, information assets, and facilities. , Proficient in creating, disseminating and maintaining policies and procedures within an organization., Adept at leading vulnerability and penetration testing efforts against large diverse information system environments., Experience in all 10 domains of information security (CISSP certified), Experience with a broad range of data protection schemas employing various encryption methods., Proficient in developing security-in-depth architecture strategies for protecting information assets.

These are some of the questions we asked our climbers about their experiences with Kgs: