Information Security Administrator

Reporting to the Exec Dir-Information Security, the Information Security Administrator maintains systems to protect data from unauthorized access, and identifies, reports, and resolves security violations. This position coordinates, plans, and organizes information security activities throughout the organization, including performing risk assessments, audits, staff training sessions, and monitoring network activity. Performs related duties as assigned.

• Monitors and protects on-site and off-site data confidentiality, integrity and availability.
• Collects, monitors, assesses and interprets information provided in various logs and SIEM solutions.
• Detects attacks, investigates incidents, revokes any improper access, and reports violations to protect data, systems, and accounts.
• Cooperates with other teams to ensure and enforce resolution at the root of issues.
• Coordinates asset management and informational asset solutions and databases.
• Performs phishing simulation campaigns and helps train victims of simulated and real scam attacks.
• Documents and presents findings and recommendations in user-friendly terms.
• Researches, tests and evaluates feasibility of new information security solutions.
• Proactively contributes to Information Security policies, procedures and guidelines.
• Assists with internal and external Information Security audits of variable scope.
• Assists with vulnerability scanning and penetration testing.
• Participates in disaster recovery and business continuity planning and exercises.
• Helps determine, plan and implement measures for risk mitigation and protection of CCC data and systems.
• Stays abreast with latest cybersecurity news and intelligence to anticipate and prevent attacks and breaches.
• Performs related duties as assigned.

Direct Supervision None

• Bachelor's degree preferably in a technical field from an accredited college or university
• Broad IT background and expertise
• 5 years of experience in Information Technology including 2 years of network and/or system administration experience outside of information security focus
• 2 years of experience in information security or computer networking and security
• Cybersecurity and IT network certifications preferred but not required
• An equivalent combination of education, training, and experience may be considered at the discretion of management
• Understanding of firewalls, networking, antivirus, patch management, Software Development Life Cycles, file systems, communication protocols, and the OSI model
• Experience with Microsoft Active Directory, Office 365, Azure and Windows environment, macOS, Android and iOS
• Familiarity with NIST cybersecurity framework preferred but not required
• Experience configuring and tuning a SIEM system such as Splunk or Log Rhythm preferred but not required
• Experience with network discovery, vulnerability scanning, and penetration testing tools and techniques preferred but not required
• Strong verbal and written communication, interpersonal, and analytic skills to interpret and clearly convey technical information and results of protection campaigns to various audiences
• Ability to identify, analyze and mitigate security threat, while effectively prioritizing and documenting security issues
• Highly self-motivated and organized, with the ability to manage multiple tasks and meet tight deadlines in a dynamic environment
• Proficient in the use of Microsoft Office 365 (Word, Excel, PowerPoint, Outlook, Teams)

$92,866 - $112,000

Offered salary will be determined by the applicant's education, knowledge, skills and abilities, as well as other factors such as internal equity.

WE

OFFER:

Excellent health and welfare benefit package and long-term savings and investment programs including 403(b) & 457(b) Investment Plans and a pension plan with the State University Retirement System (SURS) Plan. Generous vacation, holiday, personal and sick days, and tuition reimbursement. For a more detailed overview of benefits, please visit the benefits page of our website.

We are an equal opportunity and affirmative action employer.
Chicago residency is required for all full-time employees within 6 months of hire.
Thank you for your interest in CCC!