Job Summary:

We are seeking an experienced IT Security Administrator to ensure the protection and integrity of our organization's information systems. This role requires a thorough understanding of industry standards and regulations including SOC2, PCI-DSS, ISO, HIPAA, Hi-Trust, SAS70 T2, NIST, and COBIT. The ideal candidate will be responsible for developing, implementing, and maintaining robust administrative, technical, and physical controls to safeguard sensitive data and mitigate risks effectively.

Key Responsibilities:

1. Develop, implement, and enforce security policies, procedures, and controls in alignment with SOC2, PCI-DSS, ISO, HIPAA, Hi-Trust, SAS70 T2, NIST, and COBIT standards.
2. Conduct regular audits and assessments to evaluate compliance with regulatory requirements and identify areas for improvement.
3. Create and maintain documentation of security policies, procedures, incident response plans, and other relevant documentation.
4. Monitor security systems and networks for suspicious activities or potential breaches and respond promptly to security incidents.
5. Collaborate with cross-functional teams to integrate security best practices into IT infrastructure and business processes.
6. Stay abreast of emerging threats and vulnerabilities and recommend proactive measures to enhance security posture.
7. Provide guidance and training to employees on security awareness and protocols to foster a culture of security awareness.
8. Participate in risk assessments and assist in the development of disaster recovery and business continuity plans.
9. Coordinate and support external audits and assessments, ensuring adherence to regulatory standards and contractual obligations.
10. Lead security aspects of vendor management program.
11. Act as a liaison with external regulatory bodies, auditors, and vendors on matters related to information security.
12. Conduct customer security assessments and manage remediation.

Nahan is proud to be an equal opportunity employer committed to fostering a diverse and inclusive workplace. We do not discriminate based on race, color, religion, sex, national origin, age, disability, or any other characteristic protected by law.