Security Administrator - (Governance, Risk, Compliance)

About the role

As a Security Administrator II (Governance, Risk, Compliance), you will monitor corporate security devices and applications, provide oversight for physical security systems, and offer security consultancy during application development. Professional management and communication skills are critical for success.

You will maintain and promote a strong health, safety, environment, and quality (HSEQ) culture for all employees, vendors, subcontractors, and customers, ensuring compliance with HSEQ policies, procedures, regulations, and continual improvement objectives. Identifying and communicating workplace hazards and risks, with a commitment to correcting or seeking assistance for unsafe conditions, is essential.

Responsibilities

• Maintain and promote a strong safety culture for all employees, vendors, and customers, adhering to all health, safety, and environmental policies, procedures, and regulations.
• Identify and communicate workplace hazards and correct or seek assistance in correcting unsafe actions or conditions.
• Review infrastructure designs for security vulnerabilities and policies in light of security best practices and information security policies.
• Monitor, analyze, and report on corporate security systems and security applications.
• Analyze and resolve security breaches and vulnerability issues.
• Support forensic activities and digital review/evidence collection for security incidents.
• Conduct user activity audits and support business regulatory requirements.
• Perform internal network vulnerability scanning and external penetration testing, resolving issues as needed.
• Act as a point of escalation for Service Desk incidents and requests.
• Review current and future router and firewall access control lists for security best practices, vulnerabilities, and policies.
• Regulate physical security systems, including security camera systems and access control systems.
• Review security of enterprise software code.
• Adhere to IT and corporate standards and security policies.
• Assist with recommendations for changes to existing or suggest new security standards and policies associated with risk mitigation and security event response.
• Other duties as assigned.

Requirements

• Bachelor’s Degree in Information Technology or related field, 5-8 years of relevant experience, with 3-5 years in information security, or equivalent combination.
• Systems Security Certified Practitioner (SSCP) certification.
• Competent with networking, hardware, software, and server systems technologies.
• Competent with parsing security and server logs.
• Competent in IT security best practices.
• Competent with router/firewall access control lists (ACLs), virtual private networks (VPNs), and complex routing scenarios.
• Proficient with Microsoft Office, Microsoft Project, Microsoft Visio, and the two latest versions of Microsoft Windows.

Desired Qualifications

• Bachelor’s Degree in Computer Science, Information Security, or a related field.
• Certified Information Systems Security Professional (CISSP) or Certified Secure Software Lifecycle Professional (CSSLP) Certification.
• Familiar with Software as a Service (SaaS) security concepts.
• Understanding of application development best practices.
• Experience with Linux operating systems, Checkpoint firewalls, and various scripting languages.

Benefits

• Comprehensive benefits program, including:
  • Health, Dental, and Life Insurance
  • Flexible Spending Accounts and Health Savings Account
  • Short Term and Long-Term Disability Insurance
  • 401(k) plan
  • Legal Plan
  • Identity Theft and Monitoring Plan
• Average investment of $5,000 per employee on training each year.
• Limitless opportunities for career growth.

Michels Corporation is consistently ranked among the top 10% of Engineering News-Record’s Top 400 Contractors. We are family-owned and operated, with a commitment to quality and steady, strategic growth. Safety is everyone’s responsibility, regardless of job title.