IT Security Administrator

The IT Security Administrator is a critical individual contributor responsible for safeguarding the organization’s digital assets, networks, and systems. Reporting directly to the Manager, IT this role partners with business leaders, IT teams, and external vendors to design, implement, and maintain robust security measures. You will oversee the security posture of enterprise platforms, monitor for threats, respond to incidents, and ensure compliance with industry standards and regulations. This role is ideal for a proactive security professional who thrives in dynamic environments and is passionate about defending against evolving cyber threats.

What You Will Do Security Operations & Threat Management

• Monitor, analyze, and respond to security events across networks, endpoints, and cloud environments.
• Conduct regular vulnerability assessments, penetration tests, and risk analyses to identify and mitigate threats.
• Investigate security incidents, perform root cause analysis, and implement corrective actions.
• Maintain and optimize security tools including firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, SIEM, and endpoint protection.

Policy, Compliance & Governance

• Develop, implement, and enforce IT security policies, standards, and procedures.
• Ensure compliance with legal, regulatory, and industry frameworks (e.g., GDPR, HIPAA, PCI-DSS, NIST, ISO 27001).
• Coordinate and support internal and external audits, providing evidence and documentation as required.
• Manage user access controls, authentication, and identity management across systems.

Business Partnership & Training

• Collaborate with business leaders, IT teams, and vendors to align security initiatives with organizational goals.
• Provide security awareness training and guidance to staff, fostering a culture of vigilance and best practices.
• Advise on secure software acquisition, cloud adoption, and third-party risk management.

Incident Response & Disaster Recovery

• Lead or participate in incident response activities, including containment, eradication, and recovery.
• Develop and maintain business continuity and disaster recovery plans to ensure operational resilience.
• Document and report on security incidents, lessons learned, and improvement opportunities.

Continuous Improvement

• Identify and recommend enhancements to security architecture, processes, and technologies.
• Support the VP, Technology and Manager, IT in shaping the security roadmap and prioritizing initiatives.
• Promote best practices in change management, release management, and operational readiness.

About You

• 5+ years of experience in IT Security, Cybersecurity, or a related field.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent; CISSP, CISM, Security+, or similar certifications are an asset.
• Experience with enterprise security technologies, including firewalls, IDS/IPS, SIEM, endpoint protection, and cloud security solutions.
• Strong knowledge of Windows, Linux, and cloud platforms (AWS, Azure, GCP).
• Proven ability to manage security controls, incident response, compliance, and risk management activities.
• Skilled at identifying and mitigating cybersecurity risks in complex environments.
• Strong project management, communication, and stakeholder engagement skills.
• Self-motivated and accountable, with the ability to work independently and manage competing priorities.
• Thrives in fast-paced environments requiring adaptability, critical thinking, and continuous improvement.
• Experience working with vendors, consultants, and external partners to deliver security solutions.