Information Security Administrator

Information Security Administrator

Charleston Southern University

Position Summary:

The Information Security Administrator is responsible for the administration, monitoring, maintenance, and continuous improvement of the University’s information security and cybersecurity technologies, processes, and operations. Reporting to the Network Infrastructure Manager, this position works collaboratively with network, systems, applications, and other Information Technology personnel to protect the confidentiality, integrity, and availability of University information, systems, networks, applications, endpoints, cloud services, and other technology resources.

The position provides hands-on technical support for cybersecurity operations, including security monitoring and threat detection, incident response, vulnerability management, network and systems security, endpoint protection, identity and access security, risk mitigation, and cybersecurity compliance. The Information Security Administrator also coordinates the University’s employee cybersecurity awareness training program, including security education, phishing awareness and simulations, and related communications designed to strengthen the University’s overall security culture.

Essential Duties and Responsibilities:

• Administer, monitor, maintain, and support the University’s information security and cybersecurity technologies, systems, tools, and services.

• Monitor networks, systems, endpoints, cloud services, applications, security platforms, logs, and alerts for suspicious activity, vulnerabilities, unauthorized access, malware, and other potential cybersecurity threats.

• Investigate cybersecurity alerts and incidents and coordinate identification, containment, remediation, recovery, documentation, and post-incident corrective actions.

• Administer and support network, systems, and endpoint security technologies in coordination with other IT personnel, including firewalls, intrusion detection and prevention, network access control, VPN and secure remote access, endpoint detection and response, anti-malware, encryption, and related security controls.

• Coordinate vulnerability management activities, including vulnerability scanning, assessment, prioritization, remediation tracking, security hardening, patching, and verification.

• Support identity and access security, including multifactor authentication, privileged access, account security, authentication controls, access reviews, and other identity and access management safeguards.

• Coordinate the University’s employee cybersecurity awareness training program, including required training, phishing awareness and simulation exercises, targeted education, security advisories, and cybersecurity communications.

• Assist faculty and staff with identifying and reporting phishing, suspicious communications, compromised accounts, malware, and other potential cybersecurity incidents.

• Conduct or assist with cybersecurity risk assessments, security reviews, technical assessments, and evaluations of systems, services, vendors, cloud services, and proposed technology solutions.

• Assist with the development, implementation, maintenance, and enforcement of cybersecurity policies, standards, procedures, guidelines, and technical security configurations.

• Support cybersecurity compliance and data protection activities in accordance with University policies, FERPA, applicable regulatory and contractual requirements, cyber insurance requirements, and recognized cybersecurity frameworks and best practices.

• Maintain appropriate cybersecurity documentation and records related to incidents, vulnerabilities, risk assessments, security configurations, procedures, awareness training, and remediation activities.

• Prepare cybersecurity reports, metrics, analyses, and recommendations regarding security incidents, vulnerabilities, risks, awareness training, remediation activities, and the effectiveness of cybersecurity controls.

• Research emerging cybersecurity threats, vulnerabilities, attack techniques, technologies, and industry trends and recommend appropriate improvements to the University’s cybersecurity posture.

• Collaborate with IT personnel, University departments, vendors, consultants, and service providers on cybersecurity initiatives, technology implementations, disaster recovery exercises, incident response, and other security-related activities.

• Participate in after-hours response when necessary for significant cybersecurity incidents, vulnerabilities, system compromises, or other critical technology events. • Perform other duties as assigned.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Information Systems, or a related field; equivalent education and relevant professional experience may be considered.

• Four or more years of professional experience in cybersecurity, information security, network security, systems administration, network administration, or a related information technology discipline.

• Demonstrated experience with cybersecurity technologies and practices, including security monitoring, endpoint protection, vulnerability management, network security, identity and access security, and incident response.

• Experience administering or supporting security technologies such as firewalls, endpoint detection and response (EDR), intrusion detection and prevention, security information and event management (SIEM), vulnerability scanning, email security, multifactor authentication, or related platforms.

• Working knowledge of enterprise network and systems technologies, including TCP/IP networking, firewalls, operating systems, directory and identity services, cloud services, and endpoint technologies.

• Experience investigating cybersecurity alerts, suspicious activity, phishing, malware, compromised accounts, vulnerabilities, or other security incidents.

• Knowledge of cybersecurity principles, risk management, vulnerability remediation, security hardening, access controls, incident response, and recognized cybersecurity frameworks and best practices.

• Strong analytical, troubleshooting, organizational, documentation, problem-solving, and communication skills, including the ability to communicate cybersecurity concepts to technical and non-technical audiences.

• Demonstrated commitment to customer service, collaboration, confidentiality, professional ethics, and continuous improvement. Preferred

Qualifications:

• Experience working in a higher education environment.

• Professional cybersecurity certifications such as CompTIA Security+, CySA+, ISC2 SSCP or CISSP, GIAC certifications, or equivalent security-focused certifications.

• Experience with SIEM, EDR/XDR, vulnerability management, security monitoring, firewalls, intrusion detection and prevention, network access control, or similar enterprise cybersecurity technologies.

• Experience with Microsoft 365 security, Microsoft Entra ID (Azure AD), Microsoft Defender, Microsoft Sentinel, or comparable cloud security and identity technologies.

• Experience administering cybersecurity awareness training, phishing simulation platforms, and security education programs. • Familiarity with recognized cybersecurity frameworks and standards such as the NIST Cybersecurity Framework, CIS Controls, or similar industry frameworks.

• Familiarity with FERPA and other information security, privacy, regulatory, or compliance requirements applicable to higher education. Knowledge, Skills, and Abilities

• Knowledge of information security, network and systems security, endpoint and cloud security, identity and access management, vulnerability management, incident response, and data protection principles.

• Knowledge of cybersecurity threats and attack techniques, including phishing, social engineering, malware, ransomware, credential attacks, unauthorized access, and exploitation of vulnerabilities.

• Knowledge of cybersecurity technologies including firewalls, intrusion detection and prevention, network segmentation, endpoint detection and response, SIEM, vulnerability scanning, email security, multifactor authentication, and related security controls.

• Ability to analyze security alerts, logs, network activity, system events, vulnerabilities, and other technical information to identify threats, assess risk, and determine appropriate response actions.

• Ability to investigate cybersecurity incidents, maintain appropriate documentation, preserve confidentiality, and coordinate remediation with technical personnel and service providers.

• Ability to communicate cybersecurity risks, requirements, and responsibilities effectively to technical and non-technical audiences and develop clear procedures, reports, security communications, and training materials.

• Strong analytical, organizational, troubleshooting, communication, and problem-solving skills with exceptional attention to detail and the ability to manage multiple priorities.

Work Environment:

Work is primarily performed in an office and technology environment with regular interaction with Information Technology personnel, faculty, staff, vendors, consultants, and service providers. The position may require work in server rooms, telecommunications rooms, network closets, and other campus technology facilities and occasional work outside normal business hours to support cybersecurity incidents, security maintenance, vulnerability remediation, emergency response, and other critical technology needs.