Information Technology - Sr. Information Security Administrator Remote

Under the general direction of the AVP, Network Infrastructure, the Senior Information Security Administrator is responsible for administering, monitoring, and maintaining the Credit Union’s information security systems and controls. This mid-level role supports daily security operations, protects information systems from internal and external threats, ensures compliance with regulatory requirements, and helps maintain a resilient technology environment across cloud based, on-premises and remote systems.

The Senior Information Security Administrator works closely with the Senior Information Security Engineer, IT, business units, and security vendors to maintain defenses, support incident response activities, strengthen the Credit Union’s security posture, and ensure secure and reliable access to systems and data.

• Protect electronic information and infrastructure from external and internal threats,
  maintain compliance with statutory and regulatory requirements regarding information
  access, security and privacy.
• Manage and configure security tools and technologies, including firewalls, intrusion
  detection systems, and antivirus software.
• Analyze logs for suspect intrusion or attacks.
• Analyze event logs, alerts, and system activity to detect anomalies and respond
  appropriately to potential incidents.
• Oversee and support daily operations of Fortigate Firewalls, Darktrace Email and IDS/IPS,
• Arctic Wolf SIEM and vulnerability management, Appgate VPN, Sophos Anti-Virus, Fortra
• DLP, and additional security systems as assigned.
• Monitor security incidents and alerts, elevate as needed, and participate in containment
  and remediation activities.
• Participate in system security configuration changes (Change/Configuration
  Management). Ensuring all changes are properly scheduled, documented, and fully
  tested prior to roll-out.
• Conduct regular security assessments, audits, and risk analysis to identify vulnerabilities
  and threats.
• Collaborate with IT and other departments to ensure security measures are integrated
  into all aspects of the organization's operations.
• Prepare written and oral reports to keep team leaders informed of work progress.
• Maintains and documents security systems in accordance with internal standards.
• Ensure compliance and enforcement of systems standards and policies for connected
  computing environments.
• Analyzes and participates in the development of security standardization and implementation of security controls.
• Keeps professional skills updated and stays up to date with the latest security trends,
  threats, and technologies.
• May participate in an on-call rotation or respond to after-hours security events as needed.
• Perform vulnerability assessments, patch management, malware/rootkit protection, log review, access audits, and secure traffic control. Ensure timely remediation and proper configuration of network-connected systems.
• Manage secure vendor connectivity.
• Oversee daily performance of security infrastructure including firewalls, SIEM, secure remote access, etc.
• Ensure systems are properly configured, monitored, and updated to maintain network integrity.
• Perform audits and tests of all security systems and work with security vendors to remediate alerts.
• Maintain inventory of security hardware/software and assist in lifecycle management, budgeting, and licensing compliance.
• Be a contributing member of various project teams with the possibility of multiple team projects overlapping. Manage your time and productivity to ensure projects stay on task in time, cost, and scope. Effectively work with project manager and stakeholders, maintaining communications.
• Support ongoing security hardening, DR/BCP exercises, testing of data/system recovery, and improvements to resilience.
• Treats all…