Information Security Administrator

Welch Equipment Company is the premier provider of material handling solutions and represents equipment from the world's #1 manufacturers. Our culture of continuous improvement, or Kaizen, is embedded throughout the organization and is only one of the many “tools” to our success in supporting our employees.

Our core values are:

• Customer Commitment
• Integrity & Accountability
• Teamwork
• Respect
• Act with Urgency

Our goal is to provide our employees with the tools needed to build a successful career, not just a job. We provide top notch support for our technicians in the form of manufacturer training, tech support, field service supervisors, on the job training in a controlled environment, cutting-edge technology and leaders trained to support.

We are seeking employees who are ready to join a culture of continuous improvement, positive attitude, and servant leadership. If that’s you come build your career with us at Welch Equipment Company and let’s continue to set the standard!

• STD, LTD, and Life insurance
• Paid Sick Leave and PTO
• 401(k) match
• Compensation Range: $107,000 - $117,500 annually depending on experience

The Information Security Administrator is responsible for developing, implementing, and maintaining the organization’s cybersecurity program. This role serves as the primary resource for information security governance, compliance, risk management, security monitoring, security awareness, and incident response activities.

The position works collaboratively with IT, business leaders, vendors, and external partners to protect company systems and data while supporting contractual, regulatory, and industry requirements. The Information Security Administrator administers security technologies, maintains policies and standards, conducts risk assessments, supports audits, and drives continuous improvement of the organization’s security posture.

This role serves as the organization’s security champion and trusted advisor, providing management with practical recommendations regarding cybersecurity risks, compliance obligations, priorities, and investments.

• Develop, maintain , communicate, and support enforcement of cybersecurity policies, standards, procedures, and guidelines.
• Lead and support compliance and requirements initiatives
• Conduct security risk assessments, document findings, assign remediation actions, and track corrective work through completion.
• Coordinate internal and external security audits and maintain organized evidence, control documentation, and compliance records and suggest improvements based on findings
• Lead the migration of non-compliant systems, processes, and environments toward approved compliant configurations.
• Coordinate third-party and vendor security reviews and support business continuity, disaster recovery, and cybersecurity planning activities.
• Review, triage, investigate, and coordinate response to security alerts, suspicious activity, and cybersecurity incidents.
• Coordinate containment, eradication, recovery, evidence preservation, and post-incident review activities in accordance with the incident response plan.
• Research emerging threats, vulnerabilities, attack techniques, and defensive practices and translate findings into actionable recommendations.
• Develop and maintain security response playbooks, escalation procedures, detection use cases, and operational documentation.
• Administer and optimize Microsoft Defender security solutions, including Defender for Endpoint, Defender for Office 365, Defender for Identity, and Microsoft Defender XDR.
• Administer Microsoft Purview capabilities, including Data Loss Prevention, Information Protection, retention, data lifecycle controls, eDiscovery support, and other deployed compliance features.
• Manag…