Information Security Administrator Job Township of Marple Pennsylvania USA,IT/Tech

Location: Township of Marple

Delaware County Community College (DCCC), located outside of the Philadelphia Metro area, is looking for a dynamic and dedicated Information Security Administrator
to join our team of higher education technology professionals who are committed to student success. Candidates who subscribe to the notion of becoming a student-ready college and meeting students where they are, DCCC has a place for you!

The Information Security Administrator is responsible for the day-to-day operation of the College's information security program. This is a hands-on operational role responsible for security monitoring and incident response, vulnerability management, SIEM detection engineering, security platform administration, and security reporting. Reporting to the IT Project & Technical Service Delivery Manager, the Information Security Administrator works alongside systems, network, applications, and support engineers and serves asa primary technical point of contact for the College's vCISO, managed detection services, penetration testers, auditors, cyber insurance carrier, and incident-response partners.

Protecting College information and systems in accordance with FERPA, GLBA and the FTC Safeguards Rule, PCIDSS, applicable law, and College policy is a core responsibility.

The position holds privileged access across College systems and requires discretion, disciplined use of access, clear documentation, and participationinchangemanagement.

Thepositionrecommendsandimplementssecuritycontrolsandremediation;institutional risk acceptance and security policy approval remain with the Vice President, Information Technology.

Monitor security telemetry and serve as a first responder for detections and reported events; triage alerts, investigate threats, coordinate containment and recovery, and elevate incidents in accordance with the College's Incident Response Plan.

Perform recurring security operations across endpoint, identity, data, email, and network telemetry; integrate and maintain threat-intelligence feeds using MISP, STIX/TAXII, External Dynamic Lists (EDLs), APIs, and other supported methods; and translate relevant MS-ISAC, REN-ISAC, CISA, vendor, and other threat intelligence into automated or analyst-driven detection, blocking, investigation, and remediation activity.

Run the vulnerability management lifecycle, including internal, external, and authenticated scanning; validation and risk-based prioritization; direct remediation where within the position’s area of responsibility; coordination and assignment of remediation to the responsible system owner or vendor; hands-on technical assistance with remediation when needed; tracking to closure; and verification through rescan.

Develop and maintain SIEM and detection capabilities, including correlation rules, searches, dashboards, alerting workflows, log-source integrations, parsing, field extraction, and ingestion-health monitoring.

Administer and support security platforms and controls across end point detection and response, data security and governance, identity and MFA, email security, next-generation firewalls, DNS/web filtering, and vulnerability scanning.

Support identity and privileged-access security, including access reviews, privileged-account controls, Conditional Access and MFA policy, onboarding and offboarding verification, device trust, and least-privilege enforcement.

Develop custom detections, scripts, API integrations, and automation using Power Shell, Python, Bash, and other appropriate tools. Apply approved artificial intelligence tools to security analysis, investigation, detection development, scripting, automation, research, triage, and documentation; evaluate AI-assisted security capabilities where appropriate and validate outputs before operational use in accordance with College AI and data-handling requirements.

Serve as technical point of contact for the vCISO, penetration testers, managed detection and incident-response providers, auditors, cyber insurance partners, and other external security engagements, coordinate evidence and scope and track findings through remediation.

Manage third-party security risk by operating the vendor-risk monitoring platform, reviewing HECVATs and security questionnaires, evaluating exposure findings, and tracking vendor remediation during procurement and renewal.

Administer the security-awareness and phishing-simulation program, design campaigns ,manage remedial assignments and completion reporting, and develop and deliver security…