Information Security Administrator

Role overview

Security operations and governance

• Administer security operations and coordinate monitoring, assessment, and response to security events with the internal team and Managed SOC partner.
• Support incident management, vulnerability remediation, security monitoring, and implementation of controls across IT infrastructure and business applications.
• Maintain the GRC framework, assess security risks, monitor mitigations, and manage vendor security assessments and compliance reviews.
• Support regulatory and policy compliance, audits, and closure of audit findings.

Policies, risk, and collaboration

• Draft, review, update, and maintain security policies, standards, procedures, guidelines, and SOPs; keep documentation aligned with regulatory and business requirements.
• Support data protection, privacy, AI governance, emerging-technology security, business continuity, disaster recovery, and business impact analysis activities.
• Collaborate with IT, application, risk, compliance, audit, business teams, external auditors, regulators, consultants, and vendors; provide security guidance.
• Monitor threats and industry practices, recommend improvements, and support security awareness and a security-focused culture.

Education and experience

• Bachelor's degree in Information Security, Cyber Security, Computer Science, Information Technology, Computer Engineering, or a related discipline.
• Requires 5–6 years of relevant Information Security, GRC, or Cyber Security experience.
• Experience in insurance, banking, financial services, or healthcare is preferred; Managed SOC experience is an advantage.

Preferred certifications and competencies

• Preferred certifications include ISO/IEC 27001 Lead Implementer or Lead Auditor, CISSP, CISM, CompTIA Security+, CRISC, and CEH.
• Calls for analytical problem-solving, communication, stakeholder management, attention to detail, documentation, prioritization, and collaboration.