Sr Information Security Administrator

Kirtland Federal Credit Union•Albuquerque, NM

About The Position

Kirtland Credit Union is seeking a Senior Information Security Administrator, the Credit Union’s highest-level technical information security professional. The role provides advanced security engineering, operations, architecture, threat detection and response, vulnerability management, and infrastructure security expertise across the enterprise. It implements, administers, optimizes, and continually improves security technologies, controls, and monitoring capabilities that protect systems, networks, data, and member information, while ensuring technology is maintained in accordance with regulatory requirements, industry best practices, organizational standards, and defense-in-depth principles. The administrator is the senior technical resource for incident response, threat analysis, investigations, vulnerability remediation, security testing, disaster recovery preparedness, and protection of confidential member information. The position works closely with the VP Information Security Officer, Technology Department personnel, auditors, vendors, and business stakeholders to identify risks, improve controls, support compliance, strengthen operational resilience, and improve the Credit Union’s security posture. The role is regular and full-time. Applications are welcomed from local and remote candidates; hybrid collaboration is possible, and a fully remote arrangement may be supported for the best candidate.

Requirements

At least 5 years of progressive information security experience.
Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
Experience supporting audits, examinations, or cybersecurity assessments.
In-depth knowledge and experience with Microsoft 365 security technologies, Azure/Entra ID, Active Directory, SIEM platforms, EDR/XDR platforms, network security technologies, vulnerability management platforms, identity and access management, cloud security concepts, email security systems, security frameworks and regulatory requirements, security monitoring platforms, firewalls, and intrusion prevention systems.
Ability to independently analyze complex technical and security issues and develop effective solutions.
Ability to make sound risk-based decisions under pressure and during incident response.
Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
Strong analytical, troubleshooting, and problem-solving abilities.
Excellent written, verbal, and presentation communication skills, including the ability to explain technical concepts to technical and non-technical audiences.
Strong organizational and project coordination skills.
Self-motivated, accountable, and able to operate with minimal supervision.
Ability to work effectively in a collaborative, team-oriented environment.

Nice To Haves

Bachelor’s degree in Information Technology, Information Security, Cybersecurity, Computer Science, or a related field.
One or more advanced industry-related certifications, such as CISSP, CISM, a GIAC certification, Security+, CEH, SC-200, SC-300, SC-100, or Azure Security Engineer Associate.
At least 3 years of experience in a regulated financial services, banking, or credit union environment.
SQL security configuration experience.

Responsibilities

Administer, engineer, and enhance enterprise information security systems and controls; serve as the primary technical subject matter expert for security technologies and architecture.
Design, implement, configure, and maintain security solutions, including endpoint protection, EDR/XDR, SIEM, vulnerability management, email security, data protection, privileged access, identity services, cloud security, and network security systems.
Evaluate emerging threats, vulnerabilities, attack techniques, and security technologies, and recommend technical mitigations.
Lead security hardening across servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
Maintain secure authentication, authorization, least-privilege, and separation-of-duties controls; develop, maintain, and validate technical security baselines and configuration standards.
Help evaluate, implement, and integrate new technologies so appropriate controls are included during deployment.
Provide technical guidance and mentorship to Technology personnel on secure system administration and cybersecurity practices.
Lead enterprise vulnerability management, including identification, validation, risk analysis, prioritization, remediation coordination, and validation of remediation effectiveness.
Coordinate vulnerability scanning, review results, analyze security findings and assessment results, and work with system administrators, engineers, vendors, and application owners on remediation plans.
Maintain vulnerability and remediation records for audit and compliance purposes; support secure patch management and risk-based remediation priorities.
Investigate security alerts, suspicious activity, and indicators of compromise; coordinate technical responses to incidents such as malware, ransomware, unauthorized access, data exposure, and system compromise.
Conduct root-cause analysis and recommend ways to prevent recurrence; collect, preserve, and analyze security event data and evidence for investigations.
Work with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
Develop and maintain detection use cases, alerting logic, dashboards, and monitoring capabilities.
Participate in incident-response testing and recovery exercises; assist with breach-response procedures and containment activities when required.
Partner with the VP Information Security Officer, Technology personnel, auditors, vendors, and business stakeholders to identify risks, improve controls, support compliance, and strengthen operational resilience.