Cybersecurity Administrator

Join to apply for the Cybersecurity Administrator role at Guadalupe-Blanco River Authority
.

Overview

The Cybersecurity Administrator is critical in safeguarding information system assets for the organization, overseeing protection for digital, physical, and intellectual information. This role manages security posture including controls for data, devices, systems, and networks, aligning security practices with business and compliance objectives.

Responsibilities Architecture and Strategy

• Collaborate with IT and business teams to ensure information assurance policies meet customer, regulatory, and industry requirements.
• Collaborate with IT leadership to design and improve security architecture.
• Stay current with industry trends and emerging technologies to recommend and implement best practices.
• Recommend and implement security tools and technologies aligned with business objectives.
• Evaluate third‑party vendors and cloud services for security compliance.
• Support secure Development (Dev), Security (Sec), and Operations (Ops) practices and integration of security controls into CI/CD pipelines.

Technical Support

• Manage and maintain information security management systems and processes, ensuring they are up-to-date, secure, and operating efficiently.
• Verify confidentiality, integrity, and availability of data and technology through assessments and control frameworks.
• Monitor security policies and procedures for applications, operating systems, email, endpoint devices, and physical access.
• Create and maintain documentation for security systems, configurations, processes, and procedures.

Incident Response and Management

• Lead investigations into security breaches, coordinate response teams, and document incident reports.
• Develop and update incident response plans and conduct simulations.

Compliance and Governance

• Ensure compliance with industry standards and regulations (e.g., NIST, CISA, EPA, AWA, PCI).
• Maintain and update information security policies, standards, and procedures.
• Conduct regular audits to ensure compliance with organizational policies and standards.
• Support internal and external audits, including risk assessments and remediation planning.
• Provide guidance on interpreting regulatory changes and adapting internal controls accordingly.

Training and Mentorship

• Provide mentorship and guidance to entry- and mid-level IT administrators, fostering growth through training and development opportunities.
• Serve as an escalation point for technical issues, resolving high-priority incidents while transferring knowledge and providing training during the escalation process.
• Foster a collaborative and knowledge-sharing culture within the IT support teams.
• Assist in workload management and delegation of support tickets.
• Provide guidance and training to IT teams on security best practices.
• Lead security awareness programs for employees company-wide.
• Perform other duties as assigned.

Qualifications Knowledge, Skills & Abilities

• Strong communication and interpersonal skills.
• Excellent troubleshooting and problem‑solving skills.
• Expert knowledge of Artic Wolf, Avamar, Crowd Strike, Darktrace, or equivalent platforms.
• Advanced knowledge of Microsoft Azure and Microsoft 365 suite.
• Advanced knowledge of application and endpoint policy, compliance standards, and regulatory frameworks (NIST, CISA, EPA, AWA, etc.).
• Mastery of Windows and mobile operating systems.
• Mastery of infrastructure-related system configurations, protocols, and best practices.
• Familiarity with ITIL practices and methodologies preferred.
• Ability to work independently and as part of a team.

Education & Certifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field required.
• Minimum of five years of experience in IT administration with focus on information security and cybersecurity required; an equivalent combination of relevant experience may substitute for the degree.

Registrations and Licenses

• Certifications such as CISSP, CISM, CEH, or GIAC preferred.

Experience and

Special Requirements

• Expert-level experience with MDR, EDR, IDS, DLP, SIEM platforms and methodologies required.
• Expert-level experience with network and cellular…