Senior Administrator, Cybersecurity

Columbus McKinnon Corporation•Charlotte, NC

About The Position

The Cybersecurity Administrator is a hands-on cybersecurity professional responsible for administering, operating, and continuously improving Columbus McKinnon’s enterprise cybersecurity controls and processes. Reporting to the Director of Cybersecurity, this role supports the day-to-day execution of cybersecurity operations, including security tool administration, alert monitoring, vulnerability remediation coordination, access control support, incident response activities, compliance evidence collection, and cybersecurity documentation. This role is designed as an operational individual contributor with strong technical administration skills and practical project execution experience. The Cybersecurity Administrator helps ensure that security technologies are properly configured, monitored, maintained, and aligned to enterprise standards while partnering with IT, infrastructure, application, and business teams to reduce risk, strengthen the organization’s security posture, and deliver cybersecurity projects to completion.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
5+ years of experience in cybersecurity, infrastructure, systems administration, network administration, or related technical roles, with meaningful hands-on security responsibilities.
Experience administering or supporting cybersecurity tools such as endpoint protection/EDR, SIEM, vulnerability management, DLP, email security, IAM, firewalls, or cloud security platforms.
Experience supporting incident response, vulnerability remediation, access reviews, security monitoring, compliance evidence collection, or audit support.
Experience leading or coordinating cybersecurity or IT projects, including project planning, task tracking, stakeholder communication, and delivery of project outcomes.
Strong hands-on technical skills across cybersecurity operations, security tool administration, vulnerability management, incident response support, and access control.
Working knowledge of security technologies such as EDR/XDR, SIEM, vulnerability scanners, DLP, email security, firewalls, VPN, identity platforms, and cloud security controls.
Ability to monitor, troubleshoot, document, and improve cybersecurity controls and operational processes.
Understanding of common cybersecurity frameworks, control concepts, and compliance expectations, including NIST, CIS, ISO 27001, CMMC, and customer-driven requirements.
Strong analytical and problem-solving skills with the ability to investigate alerts, validate findings, and coordinate remediation.
Excellent written and verbal communication skills; able to document technical findings clearly and communicate effectively with technical and non-technical stakeholders.
Demonstrated ability to manage cybersecurity or technology projects, including planning work, coordinating stakeholders, tracking progress, managing dependencies, and communicating risks, issues, and status updates.
Collaborative, detail-oriented, pragmatic, and comfortable operating in a dynamic environment with competing priorities.

Nice To Haves

Relevant certifications such as CompTIA Security+, SSCP, CySA+, Microsoft security certifications, or equivalent practical experience preferred.

Responsibilities

Administer and maintain enterprise cybersecurity tools and controls, including endpoint protection/EDR, SIEM and logging platforms, vulnerability management tools, email security, identity and access controls, cloud security controls, DLP tools, and network security technologies.
Monitor security alerts, system health dashboards, control failures, and security tool outputs; triage issues and escalate potential incidents or operational risks as appropriate.
Support security incident response activities, including initial investigation, evidence gathering, containment support, remediation tracking, and post-incident documentation.
Maintain and execute cybersecurity runbooks, standard operating procedures, incident response playbooks, and technical workflows.
Coordinate vulnerability scanning, validation, prioritization, and remediation follow-up with IT, infrastructure, application, and business system owners.
Track remediation progress, document exceptions, validate closure evidence, and maintain accurate vulnerability and risk records.
Support identity and access management activities, including privileged access reviews, account governance, access control validation, and secure authentication practices.
Assist with implementation, tuning, and ongoing operation of cybersecurity controls, including alert rules, policy settings, baselines, exclusions, dashboards, and reports.
Support the operation of the DLP program by monitoring alerts, tuning policies, documenting findings, and coordinating follow-up with IT, Legal, HR, and business stakeholders.
Collect and organize evidence to support internal audits, customer assurance requests, compliance assessments, and cybersecurity control reviews.
Assist in translating cybersecurity policies, standards, and requirements into practical technical controls and repeatable operational procedures.
Maintain cybersecurity documentation, including asset and control inventories, process documentation, control evidence, diagrams, and operational records.
Partner with infrastructure, cloud, application, and manufacturing technology teams to implement secure configurations and remediate identified security gaps.
Support business continuity, disaster recovery, and resiliency control validation activities from a cybersecurity perspective.
Plan, coordinate, and execute cybersecurity projects and initiatives, including defining tasks, tracking milestones, managing dependencies, communicating status, and driving assigned work to completion.
Prepare routine operational reporting on vulnerabilities, alert trends, control coverage, remediation progress, and security operations health.
Support project governance activities by maintaining project plans, action logs, issue trackers, remediation schedules, and stakeholder communications for cybersecurity initiatives.
Identify opportunities to simplify, automate, standardize, and improve cybersecurity administration processes.