we have a requirement for Chief Information Security Officer position from RAND Corporation.

Company profile : http://www.jigsaw.com/id46620/rand_worldwide_company.xhtml


Below is the job description 

                
Job Title:  Chief Information Security Officer (Director, Information Security)
Job ID: 3470
Location: Santa Monica
Full/Part Time: Contract  
Regular/Temporary: Regular
Duration : Long term

Title 	 
	Chief Information Security Officer (Director, Information Security)
	Overview of RAND 
	The RAND Corporation is a nonprofit institution that helps improve policy and decisionmaking through research and analysis.  For over 60 years, decision makers in the public and private sectors have turned to RAND for objective analysis and effective solutions that address the issues that matter most, such as health, education, national security, international affairs, law and business, and the environment.  Our research is commissioned by a global clientele that includes government agencies, foundations, and private-sector firms.  Headquartered in Santa Monica, California, RAND has approximately 1,700 people from more than 50 countries working in offices in North America, Europe, and the Middle East, with research organized across ten units and annual revenues of more than $250 million.
	Position Description 
	The Chief Information Security Officer (CISO) is responsible for establishing and maintaining an enterprise-wide vision, strategy, architecture, and program for ensuring that information assets are appropriately protected.  It is the CISO’s responsibility to ensure that the RAND Corporation is in compliance with all applicable federal and state laws, directives, policies and Client requirements regarding the securing of information.  The CISO ensures implementation of the information security plans; and manages the operational processes for monitoring and maintaining information security.
The CISO is responsible for maintaining a complete awareness of current and developing information security regulations, technology, and threats.  This will require a deep technical capability, a commitment to continuous learning, and networking with information security experts.  It is the CISO’s role to translate this information into a comprehensive set of policies, procedures, and security plans to maintain appropriate security for the various types and categories of unclassified and classified information assets.
The CISO sets the overall information security vision, strategy, and architecture.  The CISO directs staff in the development and implementation of security policies, programs, and procedures to meet regulatory requirements and ensure compliance with our policies and the requirements of our Clients.
The CISO is responsible for monitoring and assessing the overall compliance of the organization with information security regulations, policies, programs, and procedures.  The CISO is responsible for conducting regular third-party independent audits of our information security.  The CISO is responsible for ensuring any resulting actions to address gaps or weaknesses are appropriately assigned and completed in a timely manner to maintain information security.
The CISO directs staff in the daily monitoring and assessment of the state of our information security.  The CISO stays aware of developing risks and has responsibility for continually responding to those risks.  The CISO is responsible for managing our response to incidents and ensuring that they are appropriately addressed, documented, and reported.
The CISO is responsible for completing and delivering regular information security reports and assessments as are required by regulatory agencies, and by our Clients.  The CISO is also responsible for preparing regular reports on our information security status to Management. 
	
Qualifications 
	•	Deep understanding of information security regulations, including Federal Information Security Management Act (FISMA), Federal Risk and Authorization Management Program (FedRAMP), Federal Information Processing Standard (FIPS), National Institute of Standards and Technology (NIST), Defense Federal Acquisition Regulation Supplement (DFARS), Health Insurance Portability and Accountability Act (HIPPA), Personally Identifiable Information (PII), and Protected Health Information (PHI), and various other laws and regulations including Executive Orders.
•	Current and deep technical knowledge and experience working with the latest information security technologies and tools, including both commercially available, Government supplied, and custom developed.  Experience must include tools for maintaining security, for assessing and evaluating security, and for doing security incident forensic work.  Knowledge of vendors and their products including:  The Apache Software Foundation, ArcSight, Bit9, Bluecoat, Cisco, McAfee, Palo Alto Networks, Juniper Networks, RSA Security (EMC), Symantec, Tripwire.
•	Experience with Government agencies, particularly the Department of Defense (DoD) on information security matters.  Experience with Government Classified systems and the associated security requirements.  Knowledge of the United States Government Configuration Baseline (USGCB). 
•	Exceptional ability to manage extremely technical staff working on very sensitive subject areas and with extremely sensitive information.  High level of personal integrity, with the ability to professionally handle confidential matters and exudes the appropriate level of judgment and maturity.
•	Successful ability to partner and influence across the Information Services organization to achieve work completion through individuals not under the CISO’s direct control.  Demonstrated strong leadership and management skills and the ability to secure results through others.
•	Ability to successfully partner and work with our internal Safety and Security Department and various external organizations including the Defense Industrial Base (DIB), the Defense Security Service (DSS), the Defense Information Systems Agency (DISA), the Federal Bureau of Investigation (FBI), and other Government organizations.
•	High degree of initiative, dependability.  Experience managing multiple, simultaneous, significant information security related initiatives and responses.  Ability to work with little supervision.
•	Deep knowledge and application of quality assurance methodologies to application and infrastructure delivery and experience meeting regulatory requirements while achieving exceptional quality standards.
•	Excellent written and oral communication skills with the ability to effectively communicate with information technology professionals as well as senior management and auditors, assessors, and inspectors.
	Education Requirements 
	Minimum of a Bachelor’s degree in Computer Science, Software Engineering, or a related field.  Strong consideration will be given for advanced degrees in related fields and related professional certifications.
Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or similar are preferred.
	Experience 
	Minimum 15 years of information technology experience, with 10 years or more years of relevant information security experience.  Requires advance to expert level knowledge and understanding of information security architecture, information security technologies, systems design, integration of systems, and networking.  Minimum of six years leadership experience in managing multiple geographically dispersed technical staff, and influencing senior level management and key stakeholders.
	Security Clearance 
	US Citizenship is required to obtain a security clearance.  Preference for an existing, transferable, Top Secret SCI clearance.
	Location 
	Santa Monica, or Pittsburgh, or Washington, DC, or Boston.