IT Security Administrator, Hays

Midwest Energy•Hays, KS

About The Position

This is a leadership role with organization-wide interaction. The purpose of the IT Security Administrator is to design, implement, maintain, and monitor the IT security framework to protect Midwest Energy from cyber-attacks. The position ensures that computer systems, data systems, software solutions, servers and networks are monitored for security issues and that protective security software is installed and operating as designed. The position is responsible for policy development as well as developing, implementing and conducting cyber security awareness training for all employees. The IT Security Administrator leads all cyber incident response efforts as prescribed by the Corporate Incident Response Plan.

Requirements

Bachelors degree in cyber security, information systems, computer science, data processing or a related technical field of study. Alternatively work experience and/or a combination of education and work experience will be accepted.
A minimum of 3 years experience in an IT discipline associated to security, networking, telecommunications, and/or data center operations and having experience with TCP/IP and OSI Network Models, Security Operations, Network Administration, Windows Server operating systems, VMware products, Microsoft Azure, Linux Server operating systems, Windows Power Shell and Linux bash scripting.
Must be able to pass a FBI or Department of Homeland Security background check in order to participate in the Kansas Intelligence Fusion Center program.
Ability to manage and supervise others in a team environment to facilitate the completion of Technology Roadmap initiatives and the advancement of the IT security program.
Exhibits professionalism and integrity by maintaining composure in challenging situations, demonstrating accountability, and upholding confidentiality and ethical standards.
Demonstrate proper and respectful communication etiquette and proficiency in verbal and written communication to correspond with the user community, cross-functional team members, managers, vendors and consultants.
Demonstrate proficiency in grammar, punctuation, and style to ensure all written content is professional and polished.
Ability to build trust through accountability, collaboration, promoting a culture of leadership, and mutual respect, while maintaining uncompromising integrity.
Ability to prioritize and execute multiple issues simultaneously.
Demonstrated analytical skills and proper troubleshooting techniques to efficiently resolve issues.
General knowledge and understanding of IT acumen associated to best practice ITIL standards including Change Control and IT Service Desk.
General knowledge and understanding of IT acumen associated to Networking, Telecommunications, PC Support and Database Administration.
Demonstrate detection and analytical skills.
Demonstrate skills utilizing technology platforms and reporting tools including Linux and Windows.
Ability to quickly and accurately find a solution to security breaches.
Ability to acquire, within a reasonable time, an understanding of basic utility operations.
Ability to organize and lead end-user training.
Must hold and maintain a valid Kansas Drivers License.

Nice To Haves

Master's degree is pre
Knowledge of electric or gas utility industry is preferred.
Certification programs evolve over time. The following list highlights several preferred certifications that demonstrate expertise in key IT disciplines relevant to this role. While this is not an exhaustive or mandatory list, possessing a combination of these certifications is advantageous and reflects a desired level of expertise and understanding: a. CompTIA Security+ b. CompTIA PenTest+ c. CompTIA PenTest+ d. EC-Council Certified Ethical Hacker (CEH) e. ISC Certified in Cybersecurity (CC) f. ISC SSCP (Systems Security Certified Practioner) g. CISSP (Certified Information Systems Security Professional) h. CISM (Certified Information Security Manager) i. CRISC (Certified in Risk and Information Systems Control) j. CGEIT )Certified in Governance of Enterprise IT) k. CCSP (Certified Cloud Security Professional) l. GIAC Certifications (e.g., GSEC, GCIH)

Responsibilities

Research current industry cybersecurity best practices.
Architect and develop a strategy and lead the implementation of the best cybersecurity practice standards accordingly.
Prepare and report security metrics (KPIs) at defined intervals based on the adopted cybersecurity framework (CSC 18, NIST, SANS, etc.) and identified baselines.
Develop, implement and facilitate a cyber security awareness user training program for all employees.
Define, develop and present performance metrics associated to the training to report the progress and performance of the company.
Monitor computer networks and devices for security issues and compliance with defined security standards including but not limited to missing and installed patches, hardened baselines, hardened software configurations, and known vulnerability mitigations.
Defend systems against unauthorized access.
Either directly or by working in conjunction with IT Department members, install cybersecurity measures by configuring, supporting, and operating software and solutions to protect systems, Corporate software and information infrastructure, including firewalls and antivirus/antimalware and IDS/IPS software.
Alert Midwest Energy employees when a new dangerous threat is identified by the cybersecurity community that cannot be mitigated through technology.
Perform active Threat hunting, looking for indicators of threats and indicators of compromise.
Perform network vulnerability assessments through periodic visits (as prescribed by the V.P. Information Technology) to the Kansas Intelligence Fusion Center and communicate assessment results with the V.P. Information Technology.
Perform internal vulnerability assessments and plan a strategy for remediation.
Review and update the Corporate Cybersecurity Incident Response (IR) Plan and associated IR Playbooks defining the process used to investigate security breaches and other cyber security incidents.
Document security breaches and assess the damage caused as laid out in the Corporate Cybersecurity Incident Response Plan.
Organize and execute an annual penetration test with an outside firm.
Work with the other members of the IT Dept. to remediate any weakness.
Assist in the purchase of cybersecurity related IT hardware and software.
As Midwest Energy is required by the North American Electric Reliability Corp. (NERC) and the relevant Reliability Entity to adhere to internal standards, procedures, and maintenance practices related to Critical Infrastructure Protection (CIP), the Corporate Network and Corporate Data Center infrastructure might, on occasion, be impacted by these compliance standards. This position will assist in the compliance measures as they relate to the Corporate Network and Corporate Data Center infrastructure.
Lead and champion the implementation of the corporate defined security program set forth by the Center for Internet Security (CIS) and defined as the 18 Critical Security Controls (CSC 18) or any other adopted security framework such as NIST, SANS, etc.
Act as the Incident Response (IR) Coordinator as defined by the Corporate Cybersecurity Incident Response Plan.
Coordinate the mitigation and remediation of detected vulnerabilities with the cooperation of applicable IT Department team members to maintain a high security standard.
Coordinate and/or lead tabletop exercises to test the Incidence Response plan and associated IR Playbooks.
Revise the IR plan and IR Playbooks if necessary and review with the team.
Actively participate in the Leadership 40 meetings.
Periodically present to the Board of Directors, Executive Staff, Leadership 40 and the employee base at large regarding IT security affairs.
Research, prepare, and present enhancements to Administrative Policies, IT Department Policies and departmental procedures to support the implementation and ongoing adherence to the adopted ITIL standards and cybersecurity framework.
Ensure Corporate IT security procedures are adhered to and accurately documented.
Maintain costs and forecast budgets relating to the corporate security program.