IT Security Administrator

Fort Sill Apache Companies•Lawton, OK

2d•Onsite

About The Position

The IT Security Administrator is responsible for the day-to-day operation, monitoring, and management of security systems, tools, and processes across the Apache Casino Hotel IT environment. This role serves as the primary point of accountability for security operations, vendor oversight, incident response, and regulatory compliance under 25 CFR 543. The position reports directly to the IT Director and works closely with all IT staff to ensure a secure, compliant, and resilient technology environment.

Requirements

3+ years of experience in IT operations, administration, or a closely related role.
Hands-on experience with SIEM platforms, endpoint detection and response tools, and firewall management.
Working knowledge of incident response frameworks and vulnerability management processes.
Familiarity with regulatory compliance requirements applicable to tribal gaming operations.
Strong documentation, communication, and organizational skills.
Ability to work independently with minimal supervision in a fast-paced, 24/7 operational environment.

Nice To Haves

Bachelor's degree in Information Technology, Cybersecurity, or a related field.
Industry certifications such as Security+, CySA+, SSCP, or equivalent.
Experience in a gaming, hospitality, or similarly regulated industry.
Familiarity with MITRE ATT&CK framework and NIST cybersecurity standards.

Responsibilities

Security Operations Monitor and manage SIEM platforms, endpoint protection, firewalls, and intrusion detection/prevention systems on a daily basis.
Perform alert triage, investigation, escalation, and documentation of security events and incidents.
Execute and coordinate incident response procedures, including containment, eradication, recovery, and post-incident reporting.
Conduct regular vulnerability scans, assess findings, and coordinate remediation with IT staff.
Vendor & Tool Oversight Serve as the primary point of contact for managed security service providers and security tool vendors.
Conduct periodic benchmark testing to validate that contracted security services are performing as expected.
Track and enforce SLA compliance, escalate deficiencies, and document vendor performance.
Evaluate and recommend new security tools and services as needs evolve.
Compliance & Documentation Maintain audit-ready documentation for 25 CFR 543.20 and applicable tribal gaming regulatory requirements.
Develop, update, and enforce IT security policies, standards, and procedures.
Support internal and external audits by providing evidence of security controls and compliance posture.
Conduct periodic access control reviews and ensure appropriate separation of duties.
Risk Management & Awareness Perform and document risk assessments across IT systems and infrastructure.
Develop and deliver security awareness training for team members across the property.
Stay current with emerging threats, vulnerabilities, and industry best practices relevant to gaming and hospitality.