Senior Information Security Advisor Cover Letter

Please consider me for the senior information security advisor opportunity. I am including my resume that lists my qualifications and experience.

In the previous role, I was responsible for technical assistance with the initial set-up, secure deployment, and proper management of systems that support information security including virus detection, application whitelisting, centralized logging, secure email gateways, data loss prevention, web content filtering, intrusion detection systems, and intrusion prevention systems.

My experience is an excellent fit for the list of requirements in this job:

• Possess a thorough understanding of concepts and principles related to information security
• Presents data and information to influence organizational partners at multiple levels in the organization
• Acts as liaison with solution owners and IT groups to ensure understanding of security principles
• Possesses strong written and oral interpersonal skills
• Proven experience in information technology education or training
• Deep knowledge of EMV cryptography
• Knowledge and experience on AS400 and Privileged Access Management
• Comfortable with being on-call

I am excited to be applying for the position of senior information security advisor. Please accept this letter and the attached resume as my interest in this position.

In my previous role, I was responsible for ongoing assessment of firewall, intrusion detection/intrusion prevention, SIEM, VPN, SSL, application control, Antivirus, and other network component policies;.

My experience is an excellent fit for the list of requirements in this job:

• Experience conducting a gap analysis to move to new version of NIST 800-53 (or 800-171) or agency equivalent
• CISSP, CISM, or CISA is preferred
• Demonstrated working knowledge of application and TCP/IP network security technologies, information security concepts, principles and components of a comprehensive information security program
• Experienced facilitator and presenter to a large audience
• Typically possesses understanding of modern security tools and controls, secure development life cycle methodologies, programming languages or other scripting languages, and web-based application architectures (IIS, Apache)
• Understanding of modern security tools and controls, secure development life cycle methodologies, programming languages or other scripting languages, and web-based application architectures (IIS, Apache)
• Experience with industry regulations such as FERPA, HIPAA, GLBA, PCI, and SOX application protocols such as MS-SQL, LDAP, and SSO, data protection controls, and applied use of cryptography
• Strong familiarity with information security frameworks and standards including ISO 27001/27002, COBIT, NIST Cyber Security Framework, Payment Card Industry Data Security Standards (PCI DSS)

Please consider me for the senior information security advisor opportunity. I am including my resume that lists my qualifications and experience.

In the previous role, I was responsible for support for a production environment of approximately 20 current intrusion detection and prevention devices with a planned growth of approximately 100% in 2019.

My experience is an excellent fit for the list of requirements in this job:

• Certifications in ITIL, CISSP, CISM, CISA, desirable
• SOX, Management, CISSP, Compliance, ITIL, Asset Management, Technical Support, Risk Management, Information Security
• Experience with Enterprise GRC tools
• Certifications in CISSP, CEH, CCSP, CISA and/or CRISC would be assets
• An attractive company pension scheme
• An extensive range of additional benefits
• CESG Certified Professional (CCP) – SIRA
• Risk management tools skills

I submit this application to express my sincere interest in the senior information security advisor position.

Previously, I was responsible for operational support for the in the form of threat and vulnerability management, web application assessment, and intrusion detection tasks.

My experience is an excellent fit for the list of requirements in this job:

• Experience working on implementing security controls in medium to large organizations (implementing proof point)
• Strong communication and collaboration skills (verbal and communication) – communicating with customers, Security Advisors, Project Managers and other teams
• Working knowledge of regulatory guidelines related to the financial services industry (OSFI B10, NYDFS NYCCR 500, etc), including knowledge of industry standards/frameworks related to Information Security (ISO27001/27002, NIST CSF, GDPR, etc)
• Excellent relationship management and negotiation skills to assist in the communication and finalization of the Bank's security requirements and standards to internal teams and third party relationships
• Certifications in CISSP, CEH, CCSP, CISA and/or CRISC would be an asset
• Certifications (CISSP, CISM, CCSP, CRISC) are nice to have
• Experience in preparing security documentation, evaluating and documenting security and privacy controls, and completing non-technical analysis activities
• Experience with NIST 800-53 Rev 4 (or 800-171) or agency equivalent

I am excited to be applying for the position of senior information security advisor. Please accept this letter and the attached resume as my interest in this position.

In my previous role, I was responsible for expert operational/engineering support for administering endpoint security products including file and e-mail anti-malware, host intrusion prevention, host firewall, device control, and application whitelisting.

Please consider my qualifications and experience:

• Experience with enterprise Windows and Linux technology infrastructure, access security, data protection security, and information systems auditing
• Familiarity with the Information Technology Infrastructure Library (ITIL) IT service management framework
• Thorough understanding of enterprise security controls in Active Directory / Windows and UNIX environments
• Experience leveraging the Cyber Kill Chain and MITRE Attack Framework
• Experience using incident response and analysis tools such as Volatility, wireshark, sysinternal, Splunk, Tanium, EnCase, F-Response, SIFT, REMnux
• Experience leading team members, directing staff priorities and completing reviews to ensure quality work products preferred
• Strong understanding of existing and emerging IT Security technologies
• Strong abilities in all areas of communication, able to interface and negotiate with senior staff