Information Security Administrator

The Information Security Administrator is responsible for the day-to-day administration and continuous improvement of the organization's information security program. This role goes beyond monitoring and reporting on security events; the Administrator actively administers security tools, follows through with remediation activities as part of the team, is responsible for measurable improvement in the organization's security posture (e.g., security score, risk rating), coordinates and supports security awareness efforts across the organization.

This is a hands‑on, execution‑focused role for someone who can operate effectively in a fast‑paced engineering and manufacturing environment to take ownership of security tasks where responsiveness, prioritization, and practical problem‑solving are essential.

• Administer and optimize Zero Trust platform, including application allow listing, ring fencing, storage control, and policy tuning.

• Continuously refine Zero Trust policies to balance security requirements, production continuity, and user productivity.

• Monitor endpoint protection tools, triage alerts, document exceptions, and coordinate follow‑up actions with the IT team.

• Administer spam filtering and email security systems, including configuration, tuning, quarantine review, and exception handling.

• Triage phishing attempts, spoofing, and email‑based threats; document findings; coordinate remediation; and escalate where appropriate.

• Coordinate with IT to review and update mail flow rules, spam policies, allow/block lists, and related email security controls as threats evolve.

• Responsible for managing all aspects of the security awareness training program, including phishing simulations, training assignments, reporting and tracking.

• Analyze training and simulation results to identify high‑risk users or departments and adjust programs accordingly

• Communicate security best practices and emerging threats to staff

• Track security score/rating trends, identify contributing factors, and coordinate improvement activities across assigned tools and teams.

• Identify gaps in the security stack, document recommended remediation steps and assist with implementation or coordination as assigned.

• Track, prioritize, and coordinate closure of open security findings, vulnerabilities, and misconfigurations with appropriate owners.

• Administer and maintain assigned information security tools, including endpoint protection, email security, Zero Trust, awareness training, and related platforms.

• Participate in evaluating new security tools and vendors by documenting gaps, gathering requirements, and supporting implementation planning as assigned.

• Maintain current documentation of security configurations, policies, and procedures exceptions, and operational runbooks.

• Review security logs and alerts to triage anomalies, document findings, and coordinate escalation as needed.

• Coordinate incident response activities, including documentation, stakeholder communication, escalation, and remediation follow‑up.

• Escalate significant threats or incidents to leadership per incident response procedures

• Prepare regular reports on security posture, training completion, remediation progress, and incident metrics for leadership review.

• Support audits and compliance efforts (e.g., SOC 2, , cyber insurance requirements) as needed

• Maintain up‑to‑date policies and procedures aligned with industry frameworks (e.g., NIST, CIS Controls)

• 4+ years of experience in an information security, IT security, or…