Information Security Administrator

Role overview

Security operations and governance

• Administer daily information security operations and coordinate security event monitoring, assessment, and response with internal teams and the managed SOC partner.
• Support incident management, vulnerability remediation, security monitoring, and implementation of controls across IT infrastructure and business applications.
• Maintain the GRC framework, conduct risk assessments, monitor mitigation plans, and manage third-party security assessments and compliance reviews.
• Support compliance with internal policies, regulatory requirements, and industry standards; assist with audits and closure of findings.

Policies, risk, and collaboration

• Draft, review, update, and maintain security policies, standards, procedures, guidelines, and SOPs; keep documentation aligned with business and regulatory changes.
• Participate in governance, data protection, privacy, and AI governance initiatives; monitor compliance with frameworks and regulatory obligations.
• Support business continuity and disaster recovery governance, business impact analysis, and continuity planning exercises; recommend controls to mitigate risks.
• Work with infrastructure, application, risk, compliance, audit, and business teams, and coordinate with auditors, regulators, consultants, and vendors.
• Monitor emerging threats and vulnerabilities, recommend improvements, provide stakeholder guidance, and contribute to security awareness.

Education and experience

• Bachelor’s degree in Information Security, Cyber Security, Computer Science, Information Technology, Computer Engineering, or a related discipline.
• 5–6 years of relevant experience in Information Security, GRC, or Cyber Security.
• Experience in insurance, banking, financial services, or healthcare is preferred; managed SOC experience is advantageous.

Technical skills and competencies

• Information security governance, risk assessment and management, IT governance and compliance, security policy development, third-party risk management, and security audits.
• Business continuity and disaster recovery, incident coordination, data protection and privacy, security documentation and SOP development, regulatory compliance, AI governance awareness, vulnerability management, and security control assessment.
• Analytical and problem-solving ability, communication and stakeholder management, attention to detail, documentation skills, prioritization, and collaborative, proactive working style.

Preferred certifications

• One or more of the following certifications are preferred: ISO/IEC 27001 Lead Implementer or Lead Auditor, CISSP, CISM, CompTIA Security+, CRISC, or CEH.

Preferred candidate environments

• Experience in insurance, banking and financial services, healthcare, large enterprise IT environments, information security governance and compliance, or managed security services is preferred.