[Hiring] Senior Information Security Administrator @Kirtland Federal Credit Union

Role Description

We are currently seeking a Senior Information Security Administrator to join Kirtland Credit Union! This is a regular, full-time position. We welcome applications from both local and remote candidates. While hybrid work offers some additional opportunities for in-person collaboration, we are flexible and prepared to support a fully remote arrangement for the best candidate.

This is what we would like you to do:

• Serve as the highest-level technical information security professional within the Credit Union.
• Provide advanced security engineering, security operations, security architecture, threat detection, threat response, vulnerability management, and infrastructure security expertise across the enterprise technology environment.
• Implement, administer, optimize, and continuously improve security technologies, controls, and monitoring capabilities that protect Credit Union systems, networks, data, and member information.
• Ensure security systems, applications, and technology infrastructure are implemented and maintained in accordance with regulatory requirements, industry best practices, organizational standards, and defense-in-depth principles.
• Serve as the senior technical resource for incident response, threat analysis, security investigations, vulnerability remediation, security testing, disaster recovery preparedness, and the protection of confidential member information.
• Partner closely with the VP Information Security Officer, Technology Department personnel, auditors, vendors, and business stakeholders to identify security risks, enhance control effectiveness, support compliance initiatives, strengthen operational resilience, and improve the overall security posture of the Credit Union.

Primary Job Duties:

• Administer, engineer, and enhance enterprise information security systems and controls.
• Serve as the primary technical subject matter expert for enterprise security technologies and security architecture.
• Design, implement, configure, and maintain security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
• Evaluate emerging threats, vulnerabilities, attack techniques, and security technologies and recommend appropriate technical mitigation strategies.
• Lead security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
• Maintain secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
• Develop, maintain, and validate technical security baselines and configuration standards.
• Assist with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
• Provide advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.
• Lead enterprise vulnerability management and security remediation activities.
• Oversee vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms.
• Coordinate vulnerability scanning activities and review results for accuracy and remediation planning.
• Perform technical analysis of security findings, penetration test results, audit findings, and vendor assessments.
• Work directly with system administrators, engineers, vendors, and application owners to develop remediation plans.
• Verify completion and effectiveness of remediation activities through testing and validation.
• Maintain vulnerability and remediation tracking records to support audit and compliance requirements.
• Support secure patch management practices and assist in establishing remediation priorities based on risk.
• Perform advanced monitoring, threat detection, and incident response functions.
• Investigate security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems.
• Coordinate technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises.
• Conduct root cause analysis and develop recommendations to reduce recurrence.
• Work directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
• Collect, preserve, and analyze security event data and evidence required for investigations.
• Develop and maintain detection use cases, alerting logic, dashboards, and monitoring capabilities.
• Participate in incident response testing and recovery exercises.
• Assist in execution of breach response procedures and containment activities when required.

Qualifications

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred.
• One or more advanced industry-related certifications such as CISSP, CISM, GIAC certification, Security+, CEH, SC-200, SC-300, SC-100, Azure Security Engineer Associate.

Requirements

• Minimum 5+ years of progressive experience in Information Security.
• 3+ years working in a regulated financial services, banking, or credit union environment preferred.
• Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
• Experience supporting audits, examinations, or cybersecurity assessments.

Knowledge, Skills and Abilities

• In-depth knowledge and experience in the following information security areas:
• Microsoft 365 security technologies
• Azure/Entra ID
• Active Directory
• SIEM platforms
• EDR/XDR platforms
• Network security technologies
• Vulnerability management platforms
• Identity and access management
• Cloud security concepts
• Email security systems
• Security frameworks and regulatory requirements
• Security monitoring platforms
• Firewalls and intrusion prevention systems
• Identity and access management solutions
• SQL security configuration experience preferred
• Ability to independently analyze complex technical and security issues and develop effective solutions.
• Ability to make sound risk-based decisions under pressure and during incident response activities.
• Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent written, verbal, and presentation communication skills.
• Ability to communicate technical concepts effectively to both technical and non-technical audiences.
• Strong organizational and project coordination skills.
• Self-motivated, highly accountable, and capable of operating with minimal supervision.
• Experience working effectively in a team-oriented and collaborative environment.

Benefits

• Medical, Dental and Vision Insurance
• 401(k) Retirement savings program
• 401(k) employer match
• Paid time off with accrual starting from day one
• 11 Paid holidays off during the year
• Tuition Reimbursement for College Degrees
• Employee Clothing Advance
• Fitness Reimbursement Program
• Employer paid Life Insurance
• Employee Assistance Program
• Employer paid Short- and Long-Term Disability Insurance
• Travel Assistance Program

Company Description

Kirtland Credit Union is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.