IT Security Administrator - Hays, KS
Job in
Olathe, Johnson County, Kansas, 66051, USA
Listing for:
ISACA
Full Time
position
Listed on 2026-02-27
Job specializations:
-
IT/Tech
Cybersecurity, IT Consultant, Information Security, Systems Administrator
Salary/Wage Range or Industry Benchmark: 80000 - 100000 USD Yearly
USD
80000.00
100000.00
YEAR
Job Description & How to Apply Below
Job Summary
This is a leadership role with organization-wide interaction. The purpose of the IT Security Administrator is to design, implement, maintain, and monitor the IT security framework to protect Midwest Energy from cyber-attacks. The position ensures that computer systems, data systems, software solutions, servers and networks are monitored for security issues and that protective security software is installed and operating as designed.
The position is responsible for policy development as well as developing, implementing and conducting cyber security awareness training for all employees. The IT Security Administrator leads all cyber incident response efforts as prescribed by the Corporate Incident Response Plan.
Job Duties - Responsibilities – Tasks Corporate Security
Research current industry cybersecurity best practices. Architect and develop a strategy and lead the implementation of the best cybersecurity practice standards accordingly.Prepare and report security metrics (KPIs) at defined intervals based on the adopted cybersecurity framework (CSC 18, NIST, SANS, etc.) and identified baselines.Develop, implement and facilitate a cyber security awareness user training program for all employees. Define, develop and present performance metrics associated to the training to report the progress and performance of the company.Monitor computer networks and devices for security issues and compliance with defined security standards including but not limited to missing and installed patches, hardened baselines, hardened software configurations, and known vulnerability mitigations.Defend systems against unauthorized access.Either directly or by working in conjunction with IT Department members, install cybersecurity measures by configuring, supporting, and operating software and solutions to protect systems, Corporate software and information infrastructure, including firewalls and antivirus/antimalware and IDS/IPS software.Alert Midwest Energy employees when a new dangerous threat is identified by the cybersecurity community that cannot be mitigated through technology.Perform active Threat hunting, looking for indicators of threats and indicators of compromise.Perform network vulnerability assessments through periodic visits (as prescribed by the V.P. Information Technology) to the Kansas Intelligence Fusion Center and communicate assessment results with the V.P. Information Technology.Perform internal vulnerability assessments and plan a strategy for remediation.Review and update the Corporate Cybersecurity Incident Response (IR) Plan and associated IR Playbooks defining the process used to investigate security breaches and other cyber security incidents.Document security breaches and assess the damage caused as laid out in the Corporate Cybersecurity Incident Response Plan.Organize and execute an annual penetration test with an outside firm. Work with the other members of the IT Dept. to remediate any weakness.Assist in the purchase of cybersecurity related IT hardware and software.As Midwest Energy is required by the North American Electric Reliability Corp. (NERC) and the relevant Reliability Entity to adhere to internal standards, procedures, and maintenance practices related to Critical Infrastructure Protection (CIP), the Corporate Network and Corporate Data Center infrastructure might, on occasion, be impacted by these compliance standards. This position will assist in the compliance measures as they relate to the Corporate Network and Corporate Data Center infrastructure.Leadership
Lead and champion the implementation of the corporate defined security program set forth by the Center for Internet Security (CIS) and defined as the 18 Critical Security Controls (CSC 18) or any other adopted security framework such as NIST, SANS, etc.Act as the Incident Response (IR) Coordinator as defined by the Corporate Cybersecurity Incident Response Plan. Coordinate the mitigation and remediation of detected vulnerabilities with the cooperation of applicable IT Department team members to maintain a high security standard.Coordinate and/or lead tabletop exercises to test the Incidence Response plan…
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
