Position: Cyber Security Administrator (onsite only)
Location: GoodfieldThe Cyber Security Administrator is responsible for the security of VIVO's servers, network, endpoints, and user accounts. Your primary focus will be owning the day-to-day security program, including endpoint security, identity and access management, vulnerability management, application auditing, and user security awareness training. You will also serve as the secondary owner and administrator for our network and server environment, acting as backup to the Software Development & Support Manager for infrastructure operations.
IT Support staff are the first line for device setup, software installation, and physical hardware installs; this role sets the security requirements and priorities that guide that work, and provides support coverage as security workload permits.
Key Accountability #1 - Endpoint, Server, and Network Security
Administer endpoint security across a mixed Windows, macOS, and ChromeOS fleet, including EDR policy configuration and tuningEstablish and maintain hardening standards, baseline configurations, and endpoint configuration management for servers and endpointsOwn vulnerability and patch management as a recurring program, including prioritization, defined remediation timelines, and monitoring of security advisories for the systems we runValidate backup integrity through regular tested restoresServe as secondary owner for server and network operations, contributing to segmentation, wireless, and firewall design and sharing on-call rotation and after-hours maintenance windowsKey Accountability #2 - Identity and Access Management
Design and maintain standard access tiers and the access request and approval workflowAdminister access to VPN, file shares, and business applications, including multi-factor authentication and single sign-on policyDocument and operate a joiner/mover/leaver process for onboarding, role changes, and terminationsConduct periodic access reviews and remediate accumulated or orphaned accessAdminister the company password management platform and maintain ongoing password health reportingKey Accountability #3 - Security Program, Detection, and Response
Develop and maintain written security policy, standards, asset inventory, and environment documentationDeliver ongoing user security awareness training, including phishing simulation and targeted follow-up, and teach security concepts to IT staff and end usersConduct security review and auditing of web and desktop applications before and after deploymentMaintain log aggregation, monitoring, and alerting so security-relevant activity is visible and actionableOwn the incident response plan and lead response, containment, after-action review, and annual tabletop exercisesKey Accountability #4 - IT Support
Provide in-house technical support to end usersInstall, configure, and maintain computer systems and softwareNetwork and server support as neededCloud software and application supportBasic hardware troubleshooting and maintenanceDemonstration of Vivo Values and Standards of Behavior
Integrity
- Developing relationships on the foundation of trust and upstanding character
Initiative
- Having a work ethic that is proactive in seeing and improving company needs
Invested
- Devoting our time, talents and ingenuity to making VIVO the best it can be
Adaptive
- Having the courage to boldly take risks and grow in an ever-changing market
Respect
- Placing value in others to foster an environment of mutual compassion and synergy
Serve
- Working together to nurture a culture of humility as we give back to others
Qualifications
Education
- High school diploma required, Bachelor's degree in Cyber Security, Information Systems, Computer Science or similar major preferred
Experience - 2 to 4 years of relevant experience required,…
