Security Administrator

Hybrid in Lenexa, KS

Join us in shaping a healthier future for kids. At Children's Hospital Association, we unite more than 200 member hospitals to put children first—advancing care, informing policy, and driving progress together.

This position is based in our Lenexa, Kansas office. We leverage a hybrid working model working three days in the office, two days optional remote work.

The Security Administrator is responsible for the day-to-day administration and continuous improvement of the information security control environment, with a primary focus on integrating information systems and security tools across on-premises and cloud environments. This role owns the recurring operational workload of the Information Security & Risk team, including identity and access governance, data protection, security awareness training, vulnerability and endpoint management, vendor/third-party risk assessment, and Shadow IT/AI governance.

• Implement, administer, and continuously improve integrations, automation, and workflows between security tools and enterprise systems to improve efficiency, visibility, and audit readiness.
• Support identity and access governance activities, including access reviews, least-privilege controls, password management, and external/vendor access administration.
• Support security risk management activities, including vendor assessments, technology reviews, audit readiness efforts, and data protection initiatives.
• Monitor vulnerability management, endpoint security, security awareness training, and operational security controls to help maintain a proactive security posture.
• Contribute to emerging security initiatives such as AI governance, Shadow IT management, and cloud security modernization efforts.
• Develop documentation, standards, and security processes that support consistency, scalability, and regulatory compliance across the organization.
• Collaborate cross-functionally to troubleshoot issues, implement improvements, and support ongoing security projects.

Any combination of education and experience providing the required skill and knowledge is qualifying:

• Bachelor's degree in information security, IT, or related field, or equivalent experience.
• 3+ years in IT or information security administration, including at least 2 years in a security-focused role.
• Hands-on experience with Microsoft 365 security administration (Entra , Conditional Access, Purview, Defender) in a cloud or hybrid environment.
• Experience integrating systems and security tools using APIs, SSO, SCIM, and connectors; scripting or automation skills (Power Shell, Python, or low-code workflows).
• Working knowledge of NIST CSF, HIPAA, and/or ISO 27001, plus experience reviewing SOC2 evidence.
• Experience with vulnerability management, endpoint management, patching, and change management.
• Strong communication, documentation, and project management skills.

• Security certifications such as Security+, SSCP, CySA+, SC-300, SC-401, or AZ-500.
• Experience with third-party risk management or GRC platforms.
• Familiarity with AI governance, Shadow IT/SaaS discovery, and AI risk frameworks.
• Knowledge of incident response, disaster recovery, and business continuity practices.
• Experience building security metrics and dashboards.
• Training and facilitation skills.

• Medical, dental and vision insurance
• Retirement Savings program with generous company contribution
• Health Savings Account with company contribution
• Wellness program
• Paid time off and personal days9paid holidays
• And more!

This pay range shown isa guideline. Min:$82,000 - $166,000 Compensation is based on factors such as qualifications, skill level, and…