Security Administrator

• Pay or shift range: $93,500 USD to $105,500 USD
  The estimated range is the budgeted amount for this position. Final offers are based on various factors, including skill set, experience, location, qualifications and other job-related reasons.

SALRY RANGE: $93,500 - $105,500

PRIMARY RESPONSIBILITY:

The Security Administrator (SA) is responsible for the day-to-day execution of operational and technical activities supporting the Bank’s Information Security Program. Reporting administratively to the Chief Technology Officer and operating under the functional security direction of the Bank’s CISO or designated CISO advisor, the SA administers, monitors, and optimizes the Bank’s core security technologies and recurring security processes. Responsibilities include security alert triage, incident response support, vulnerability management coordination, access reviews, security awareness administration, technical control configuration, evidence maintenance, reporting, and remediation tracking.

The SA executes established security priorities and promptly escalates material risks, incidents, policy exceptions, and control deficiencies to the CISO and appropriate management.

ESSENTIAL FUNCTIONS:

• Manage and administer core security tools and systems, including email security, endpoint protection, identity security, and data security and compliance platforms, including data classification, information protection, and data loss prevention capabilities.
• Monitor systems and tools to detect anomalous or malicious activity across endpoints and networks.
• Own and resolve security related user support tickets, including reports of malware, email compromise, and other security incidents. Perform initial triage, review available logs, correlate activity, preserve relevant evidence, determine preliminary scope and severity, and promptly escalates matters in accordance with the Incident Response Plan.
• Monitor, investigate, document, and disposition security alerts across the Bank’s security platforms. Identify monitoring gaps, recurring root causes, tuning opportunities, and conditions requiring escalation.
• Support containment, eradication, and recovery activities in coordination with the CISO, CTO, managed security providers, and other members of the Incident Response Team. Perform preliminary technical analysis and evidence collection and coordinate advanced forensic analysis with internal or external resources when required.
• Review and coordinate tickets and alerts generated by the Bank’s MDR, SOC, and other managed security providers, ensuring appropriate internal follow-up, escalation, and closure.
• Monitor and administer controls intended to detect or prevent unauthorized data access, data exfiltration and inappropriate transmission of sensitive information.
• Administer the access review process to ensure user access is appropriately provisioned.
• Administer operational components of the vulnerability management program, including scan monitoring, result validation, asset and owner coordination, remediation tracking, exception documentation, and reporting. Technical system owners remain responsible for implementing assigned remediation actions.
• Oversee phishing simulation campaigns, track results, and provide remedial training as needed. Educate and train end users via vendor-based tools, grass roots education campaigns, and bank provided self-service training.
• Support the administration and streamlining of the bank’s Privileged Access Management system, defining and maintaining roles, and developing and maintaining appropriate documentation.
• Support the CISO-led Information Security Risk Assessment process.
• Administer technical controls supporting the Bank’s approved records-retention requirements within…