IT Security & Systems Administrator

NORLEE INVESTMENTS LLC•Jacksonville, FL

35d•Hybrid

About The Position

The IT Security & Systems Administrator is responsible for leading cybersecurity and compliance initiatives within the organization while supporting overall IT operations. This role oversees security monitoring, incident response, compliance framework maintenance, vulnerability management, and security policy development. The position also contributes to Service Desk Operations and Infrastructure Engineering by providing advanced security support and collaborating on secure system design and implementation.

Requirements

Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
A minimum of four (4) years of progressive IT experience with a significant focus on cybersecurity is required.
At least two (2) years of hands-on experience with security tools such as SIEM platforms, endpoint protection solutions, vulnerability management scanners, and identity security technologies.
Experience supporting compliance frameworks including SOC 2, ISO 27001, or CMMC is required.
Strong understanding of network security concepts such as firewalls, VPNs, and network segmentation.
Demonstrate experience securing and hardening Windows and Linux systems.
Familiarity with cloud security controls in Azure or AWS environments.
Involvement in security assessments, remediation activities, and incident response processes.
Strong written and verbal communication skills, with the ability to clearly and concisely convey technical and security concepts to both technical and non-technical audiences.
Effective at developing policy documentation, delivering user training, and promoting security awareness across the organization.
Skilled at listening to and addressing the needs of end users while balancing cybersecurity requirements with business operational priorities.
Strong attention to detail is required, particularly when managing compliance documentation, procedures, and audit evidence.
A continuous learning mindset is essential to stay current with evolving cybersecurity threats, technologies, and industry best practices.
Ability to read, interpret, and apply technical documents, including operating instructions, safety rules, and procedural manuals.
Basic mathematical skills, including the ability to perform addition, subtraction, multiplication, and division with whole numbers, fractions, and decimals, are necessary for the role.
Proficiency with enterprise IT systems and cybersecurity tools is required, including Microsoft 365, Windows Server, Active Directory, endpoint security platforms, SIEM tools, vulnerability management solutions, and cloud administration environments such as Azure or AWS.

Nice To Haves

Industry experience supporting construction, engineering, or field services organizations is preferred.
Professional certifications such as CompTIA Security+, CISSP, CISM, CEH, or relevant cloud security certifications are considered beneficial.

Responsibilities

Lead the implementation, administration, and continuous improvement of organizational security controls, including endpoint protection, email security, multi-factor authentication (MFA), network segmentation, system hardening, and cloud security configurations.
Monitor, analyze, and respond to security alerts and events; investigate potential threats and coordinate incident response activities, including maintaining documented response and breach notification procedures.
Maintain and support compliance frameworks such as SOC 2 Type 2 and ISO 27001, including risk assessments, control implementation, evidence collection, documentation management, and continuous improvement initiatives.
Develop, maintain, and enforce security policies, procedures, and standards aligned with regulatory requirements and industry best practices.
Conduct vulnerability assessments and partner with infrastructure and application teams to coordinate remediation efforts and reduce organizational risk exposure.
Administer and enhance organization-wide security awareness programs, including phishing simulations, policy education, and employee security training.
Perform vendor security reviews and support third-party risk management processes related to technology partners and service providers.
Act as a primary liaison for internal stakeholders and external auditors by preparing and providing required compliance documentation, artifacts, and audit evidence.
Provide Tier 2/3 support for security-related service desk issues, including access management challenges, onboarding and offboarding reviews, and security tool troubleshooting.
Collaborate with Infrastructure Engineering to design and maintain secure architectures across network devices, servers, and cloud environments, ensuring security requirements are embedded into project planning and deployment.
Support backup, disaster recovery, and incident response planning and testing from a security assurance and validation perspective.
Contribute to internal knowledge base documentation and promote security best practices throughout the organization.
Perform other duties as assigned.