IT Security Administrator

The IT Security Administrator is a critical individual contributor responsible for safeguarding the organization's digital assets, networks, and systems. Reporting directly to the Manager, IT this role partners with business leaders, IT teams, and external vendors to design, implement, and maintain robust security measures. You will oversee the security posture of enterprise platforms, monitor for threats, respond to incidents, and ensure compliance with industry standards and regulations. This role is ideal for a proactive security professional who thrives in dynamic environments and is passionate about defending against evolving cyber threats. 

What you will do: 

Security Operations & Threat Management 

Monitor, analyze, and respond to security events across networks, endpoints, and cloud environments. 
Conduct regular vulnerability assessments, penetration tests, and risk analyses to identify and mitigate threats. 
Investigate security incidents, perform root cause analysis, and implement corrective actions. 
Maintain and optimize security tools including firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, SIEM, and endpoint protection. 
Stay current with emerging threats, attack vectors, and defense strategies. 

Policy, Compliance & Governance 

Develop, implement, and enforce IT security policies, standards, and procedures.
Ensure compliance with legal, regulatory, and industry frameworks (e.g., GDPR, HIPAA, PCI-DSS, NIST, ISO
Coordinate and support internal and external audits, providing evidence and documentation as required.
Manage user access controls, authentication, and identity management across systems. 

Business Partnership & Training 

Collaborate with business leaders, IT teams, and vendors to align security initiatives with organizational goals.
Provide security awareness training and guidance to staff, fostering a culture of vigilance and best practices.
Advise on secure software acquisition, cloud adoption, and third-party risk management. 

Incident Response & Disaster Recovery 

Lead or participate in incident response activities, including containment, eradication, and recovery.
Develop and maintain business continuity and disaster recovery plans to ensure operational resilience.
Document and report on security incidents, lessons learned, and improvement opportunities. 

Continuous Improvement 

Identify and recommend enhancements to security architecture, processes, and technologies.
Support the VP, Technology and Manager, IT in shaping the security roadmap and prioritizing initiatives.
Promote best practices in change management, release management, and operational readiness. 

About you: 

You are a detail-oriented, analytical security professional with a proven track record in defending complex environments. You bring strong technical expertise, excellent communication skills, and a collaborative approach to delivering high-impact security solutions. You excel in fast-paced settings with multiple stakeholders and thrive on enabling the business through secure technology. 

You bring: 

5+ years in IT Security, Cybersecurity, or related roles 
Hands-on experience with enterprise security solutions (firewalls, IDS/IPS, SIEM, endpoint protection, cloud security platforms), and deep familiarity with Windows, Linux, and cloud environments (AWS, Azure, GCP)
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (Master's or certifications such as CISSP, CISM, CompTIA Security+ are highly valued).
Demonstrated experience implementing and managing security controls, responding to incidents, and supporting compliance initiatives.
Strong project management skills, with the ability to lead multiple initiatives simultaneously. 
Excellent communication and training abilities; comfortable engaging business leaders and technical teams. 
High levels of proactivity, organization, and adaptability; a structured thinker who evaluates options, recommends solutions, and supports execution.
Solid vendor and partner management experience, including working with consultants and system integrators. 

---