S

Information Security Lead - Manager

SC&H Group External
Full-time
On-site
Sparks Glencoe, Maryland, United States

SC&H Group is seeking a highly talented and motivated professional to add to our IT Audit/Cybersecurity Risk Management Practice as an Information Security Lead - Manager. SC&H offers you an opportunity to leverage your internal audit, internal control, consulting, cybersecurity, and IT audit experience and broaden your business and project management skills in a rewarding and challenging environment.


SC&H’s Risk Management Practice provides cybersecurity, data privacy, and IT Audit process, risk, and control services to assist organizations in independently assess and manage financial, operational, and IT security risks. Work with other talented consultants to provide world class internal audit and consulting services support to our clients in meeting their business objectives. 


Any unsolicited resumes submitted through our website or to SC&H Group, Inc., employee e-mail accounts are considered property of SC&H Group, Inc., and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for SC&H Group, Inc., there must be a formal written agreement in place and the agency must be invited, by SC&H's Talent Acquisition team, to submit candidates for review.


Work you'll do:



  • Provide clients with IT internal audit, cybersecurity assessment, data privacy support, Sarbanes-Oxley, and internal control consulting services.

  • Lead ISO 27001:27701 audits in various types of environments and guide clients to successfully achieve certification.

  • Review IT security, cybersecurity, and data privacy programs to provide clients with an independent assessment of risks, internal controls, and the overall effectiveness and efficiency of their environment.

  • Prepare and complete documentation packages to include SOPs, policies, plans, templates, and manuals which address all ISO 27001 and 27701 requirements

  • Maintain a strong client focus by effectively serving client needs and developing productive working relationships with client personnel.

  • Stay abreast of new industry pronouncements/standards, current business and economic developments, and/or other guidance relevant to the client’s business.

  • Display teamwork, integrity, leadership, and initiative. Work with team members to set goals and responsibilities for specific engagements.

  • Utilize technology and data analytics to continually learn and innovate, share knowledge with team members, and enhance service delivery.

  • Understand SC&H and its service lines. Actively encourage team members to contribute ideas and identify potential opportunities to apply SC&H’s services.

  • Provide direction for scheduling, project sequencing, and resource management; assist with managing client expectations and performing project management




      Qualifications:



      • 3-6 years IT Audit, cybersecurity, and/or data privacy related experience

      • Strong ISO 27001, 27701 knowledge and experience

      • Previous commercial experience required

      • Big Four or other National/ large regional accounting firm experience is a plus

      • Bachelor's degree in Accounting, Business, Computer Science or Information Systems

      • Strong communication and problem solving skills, as well as the ability to present complex information to high-level executives

      • ISO Lead Auditor Certification or CISA preferred

      • The ability to excel and think independently in a team environment

      • Excellent communication skills, both written and verbal with strong presentation skills.

      • Ability to interact with clients and represent SCH in a professional manner.

      • Ability to successfully manage multiple tasks.

      • Serve as a mentor to Associate Security Consultants and Security Consultants on best practices.

      • Team player able to work well with others in a collaborative manner and is a self-starter who can work with minimum supervision.

      • Work to continually build and improve solid and well-rounded practices and processes 

      • Strong written and verbal communication skills including the ability to explain technical matters to non-technical audiences

      • Broad based IT background with a technical understanding of networks, protocols, security configurations, cryptography, identity and access management, and the systems development life cycle.


      ABOUT SC&H


      SC&H is a national consulting and financial services firm, home to people who believe in the power of trusted personal relationships. Everyone here shares a passion for driving results — a passion fueled by the genuine connections we forge. Our expert capabilities and exceptional service have shaped the


      firm’s longstanding reputation for excellence and impressive growth. But it’s the partnerships we foster and success we help deliver that make each day rewarding — for our colleagues, our clients, and our community.


      SC&H has been deemed a “best place to work” by Inc., Baltimore Business Journal, Accounting Today, and Inside Public Accounting. In 2022, Inside Public Accounting recognized us as the fastest growing firm for organic growth in the United States. Our success is driven by 11 diverse practices at the intersection of finance, enterprise technology, and accounting, 400 employees, and a client base of rapidly growing startups to world-renowned Fortune 500 companies. This is the place to build lasting professional relationships, grow your skills, and fulfill your potential.


      SC&H


      Make it Rewarding.


      All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.