IT Security Administrator

Owensboro Municipal Utilities•Owensboro, KY

18h•$49 - $61•Onsite

About The Position

Under the general direction of the IT Manager, the IT Security Administrator is responsible for the management of the organization's information security policies, security procedures, and security processes. This includes hardware, firmware, and software. Ensures that security architecture, plans, controls, processes, standards, policies, and procedures align with OMU needs and meet regulatory and industry requirements. Manages all vulnerability remediation. Develops, deploys, and maintains secure critical communication systems, and oversees network equipment, services, telephony, and mobile unit support to ensure reliable operation. Stays abreast of security-related regulatory requirements, industry standards, and best practices and implementing and managing changes as needed. Must be able to work autonomously. Must be able to effectively use interpersonal and communications skills including tact and diplomacy.

Requirements

Technical degree required in such disciplines as Computer Engineering, CPA, etc., plus 6 years related experience and/or training, and 2 years related management experience, or equivalent combination of education and experience.
Ability to read, analyze, and understand common scientific and technical journals, financial reports, and legal documents; ability to respond to complex or difficult inquiries or complaints from customers, regulatory agencies, or members of the business community.
Ability to apply advanced mathematical concepts such as exponents, logarithms, quadratic equations, and permutations. Ability to apply mathematical operations to such tasks as frequency distribution, determination of test reliability and validity, analysis of variance, correlation techniques, sampling theory, and factor analysis.
Ability to apply principles of logical or scientific thinking to a wide range of intellectual and practical problems. Ability to deal with nonverbal, logical or scientific symbolism such as formulas, scientific equations, and graphs. Ability to deal with a variety of abstract and concrete variables.
Valid Driver's License
Mastery: Database
Advanced: Presentation/PowerPoint, Programming Languages, Spreadsheet
Intermediate: Contact Management, Word Processing/Typing
Basic: 10-Key, Alphanumeric Data Entry
Minimum of six years of work experience and/or training in information security administration.
Minimum of two years related management experience.
Advanced security remediation skills, regulatory/industry knowledge, log aggregation and investigation, and vendor management skills are required.

Nice To Haves

Master's degree preferred in a technical related field.
CompTIA Security+ or SANS GIAC Security Essentials
Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+) or Cisco CCNA Cyber Ops
CyberSec First Responder (CFR)
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)

Responsibilities

Manages detailed, comprehensive investigations related to security issues.
Conducts routine vulnerability scans and manages timely remediation of identified vulnerabilities for corporate IT networks and systems.
Analyzes system logs for anomalies on a routine basis. Collects evidence to support prosecution when necessary and isolates malicious activity to prevent further damage to OMU information.
Installs, configures, and maintains network services, equipment, and devices; architects, plans, and supports network and computing infrastructure; leads and plans daily maintenance and problem resolution, including operating system patches, software upgrades, and routine hardware configuration for LAN/WAN and related systems.
Oversees building access security and monitoring (including badge access and surveillance systems), as well as all communications billing, configuration, and support related to telephony and mobile units.
Stays abreast of new and emerging threats that can affect OMU's information assets.
Completes advanced security training at least annually.
Reviews security settings for access and transmission of information, including routers, switches, firewalls, Active Directory, software settings, remote access, servers, wireless, PCs, web services, APIs, etc.
Develops long-term strategies for conducting penetration testing, vulnerability scanning, remote-access security, PCI compliance, phishing exercises, security training, and other security-related activities.
Performs day-to-day security functions related to security reviews and processes.
Evaluates, recommends, and implements security solutions that are effective and affordable.
Manages contractors, when needed, who have highly specialized skills in security systems.
Ensures compliance with regulatory security and data protection measures (including those measures required for compliance with PCI, HIPAA, House Bill 5 PII, etc.).
Provides technical support, advice, and consultation to customers with issues relating to information security.
Provides 24/7 support of critical systems in area of responsibility.
Maintains confidentiality of work-related information and materials.
Perform any other related duties as required or assigned.