Security Administrator

Responsibilities

• Provide gap analysis between security policies/standards/regulations and practices, processes, and solutions; recommend actions to the agency
• Aid in establishing, documenting, and managing processes and supporting tools used to accomplish IT compliance with regulatory and best practice security and compliance frameworks (e.g., CJIS, SSAE 16, ISO 27001)
• Collaborate with agency and IT owners to set priorities for process improvements to address or reduce risk
• Handle problem determination and resolution for security gaps
• Support agency functions during incidents or breaches
• Train and assist security administration functions as needed
• Engage with IT staff and agency personnel in meetings to enhance understanding of security issues and discuss solutions
• Support IT asset security control coverage and metrics reporting regarding security and compliance data using existing tools
• Afford assistance with threat and vulnerability management processes and tools
• Review and respond to all system logs, alerts, and notifications from agency systems
• Maintain and monitor Sheriff’s Office systems for security patches and updates
• Conduct periodic security assessments and tests to develop action items
• Monitor and respond to cybersecurity intelligence and alerts from various sources
• Prepare automated and ad hoc reports and/or interpret data from various security sources (e.g., eSet, Proofpoint, Checkpoint, Active Administrator)
• Afford support for application meta-data inventory, mapping, and data flow process documentation
• Monitor and respond to critical vendor security activities

Qualifications

• A bachelor's degree from an accredited institution of higher education in a technical field
• Prioritized certifications: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), and/or other related professional designations
• Minimum of 5 years of experience in administering security controls
• At least 2 years of experience in networking, database design, programming, and scripting, or server administration
• Proven experience managing IT compliance within regulated environments
• Significant background in monitoring system logs, managing threat intelligence, and responding to real-time security alerts
• Extensive hands-on experience coordinating enterprise-wide security patching and managing threat/vulnerability assessment tools
• Demonstrated ability to assist in the containment and resolution of security breaches and technical gaps
• Practical experience with security platforms such as Proofpoint, Checkpoint, eSet, and Active Administrator
• Experience collaborating with stakeholders to identify and prioritize process improvements based on organizational risk
• Proficiency in mapping data flows, maintaining application metadata inventories, and monitoring critical vendor security