Information Security Administrator

Charleston Southern University•North Charleston, SC

About The Position

The Information Security Administrator administers, monitors, maintains, and continually improves Charleston Southern University’s information security technologies, processes, and operations. Reporting to the Network Infrastructure Manager, the role collaborates with network, systems, applications, and other IT personnel to protect University information and technology resources. The position provides hands-on support for security monitoring and threat detection, incident response, vulnerability management, network and systems security, endpoint protection, identity and access security, risk mitigation, and cybersecurity compliance. It also coordinates employee cybersecurity awareness training, phishing awareness and simulations, and related communications.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Information Systems, or a related field; equivalent education and relevant professional experience may be considered.
Four or more years of professional experience in cybersecurity, information security, network security, systems administration, network administration, or a related IT discipline.
Demonstrated experience with cybersecurity technologies and practices, including security monitoring, endpoint protection, vulnerability management, network security, identity and access security, and incident response.
Experience administering or supporting security technologies such as firewalls, EDR, intrusion detection and prevention, SIEM, vulnerability scanning, email security, multifactor authentication, or related platforms.
Working knowledge of enterprise networking and systems technologies, including TCP/IP networking, firewalls, operating systems, directory and identity services, cloud services, and endpoint technologies.
Experience investigating cybersecurity alerts, suspicious activity, phishing, malware, compromised accounts, vulnerabilities, or other security incidents.
Knowledge of cybersecurity principles, risk management, vulnerability remediation, security hardening, access controls, incident response, and recognized cybersecurity frameworks and best practices.
Strong analytical, troubleshooting, organizational, documentation, problem-solving, and communication skills, including the ability to communicate cybersecurity concepts to technical and non-technical audiences.
Commitment to customer service, collaboration, confidentiality, professional ethics, and continuous improvement.
Knowledge of information security, network and systems security, endpoint and cloud security, identity and access management, vulnerability management, incident response, and data protection principles.
Knowledge of cybersecurity threats and attack techniques, including phishing, social engineering, malware, ransomware, credential attacks, unauthorized access, and exploitation of vulnerabilities.
Knowledge of cybersecurity technologies including firewalls, intrusion detection and prevention, network segmentation, endpoint detection and response, SIEM, vulnerability scanning, email security, multifactor authentication, and related controls.
Ability to analyze security alerts, logs, network activity, system events, vulnerabilities, and other technical information to identify threats, assess risk, and determine appropriate response actions.
Ability to investigate cybersecurity incidents, maintain appropriate documentation, preserve confidentiality, and coordinate remediation with technical personnel and service providers.
Ability to communicate cybersecurity risks, requirements, and responsibilities effectively to technical and non-technical audiences and develop clear procedures, reports, security communications, and training materials.
Strong analytical, organizational, troubleshooting, communication, and problem-solving skills, exceptional attention to detail, and ability to manage multiple priorities.

Nice To Haves

Experience working in a higher education environment.
Professional cybersecurity certifications such as CompTIA Security+, CySA+, ISC2 SSCP or CISSP, GIAC certifications, or equivalent security-focused certifications.
Experience with SIEM, EDR/XDR, vulnerability management, security monitoring, firewalls, intrusion detection and prevention, network access control, or similar enterprise cybersecurity technologies.
Experience with Microsoft 365 security, Microsoft Entra ID (Azure AD), Microsoft Defender, Microsoft Sentinel, or comparable cloud security and identity technologies.
Experience administering cybersecurity awareness training, phishing simulation platforms, and security education programs.
Familiarity with recognized cybersecurity frameworks and standards such as the NIST Cybersecurity Framework, CIS Controls, or similar industry frameworks.
Familiarity with FERPA and other information security, privacy, regulatory, or compliance requirements applicable to higher education.

Responsibilities

Administer, monitor, maintain, and support the University’s information security technologies, systems, tools, and services.
Monitor networks, systems, endpoints, cloud services, applications, security platforms, logs, and alerts for suspicious activity, vulnerabilities, unauthorized access, malware, and other potential threats.
Investigate cybersecurity alerts and incidents and coordinate identification, containment, remediation, recovery, documentation, and post-incident corrective actions.
Administer and support network, systems, and endpoint security technologies, including firewalls, intrusion detection and prevention, network access control, VPN and secure remote access, endpoint detection and response, anti-malware, encryption, and related controls.
Coordinate vulnerability scanning, assessment, prioritization, remediation tracking, security hardening, patching, and verification.
Support identity and access security, including multifactor authentication, privileged access, account security, authentication controls, and access reviews.
Coordinate employee cybersecurity awareness training, including required training, phishing awareness and simulations, targeted education, security advisories, and cybersecurity communications.
Assist faculty and staff with identifying and reporting phishing, suspicious communications, compromised accounts, malware, and other potential incidents.
Conduct or assist with cybersecurity risk assessments, security reviews, technical assessments, and evaluations of systems, services, vendors, cloud services, and proposed technology solutions.
Assist with developing, implementing, maintaining, and enforcing cybersecurity policies, standards, procedures, guidelines, and technical security configurations.
Support cybersecurity compliance and data protection in accordance with University policies, FERPA, applicable regulatory and contractual requirements, cyber insurance requirements, and recognized frameworks and best practices.
Maintain cybersecurity documentation and records concerning incidents, vulnerabilities, risk assessments, security configurations, procedures, awareness training, and remediation activities.
Prepare cybersecurity reports, metrics, analyses, and recommendations concerning incidents, vulnerabilities, risks, awareness training, remediation, and control effectiveness.
Research emerging cybersecurity threats, vulnerabilities, attack techniques, technologies, and industry trends and recommend improvements to the University’s cybersecurity posture.
Collaborate with IT personnel, University departments, vendors, consultants, and service providers on cybersecurity initiatives, technology implementations, disaster recovery exercises, incident response, and other security-related activities.
Participate in after-hours response when necessary for significant cybersecurity incidents, vulnerabilities, system compromises, or other critical technology events.
Perform other duties as assigned.