Sr Information Security Administrator

Working at Kirtland CU is more than a job-it's a career, and one in the financial world! We pride ourselves on helping our employees learn, grow, and advance in any direction they choose. We offer a highly competitive salary, great benefits package and an energetic, vibrant work environment. 
 
We are currently seeking a Senior Information Security Administrator to join Kirtland Credit Union! This is a regular, full-time position. We welcome applications from both local and remote candidates. While hybrid work offers some additional opportunities for in-person collaboration, we are flexible and prepared to support a fully remote arrangement for the best candidate.

Join the rest of our teammates and become eligible for a generous benefits package that we offer:

• Medical, Dental and Vision Insurance
• 401(k) Retirement savings program 
• 401 (k) employer match 
• Paid time off with accrual starting from day one.
• 11 Paid holidays off during the year! 
• Tuition Reimbursement for College Degrees
• Employee Clothing Advance
• Fitness Reimbursement Program
• Employer paid Life Insurance
• Employee Assistance Program
• Employer paid Short- and Long-Term Disability Insurance
• Travel Assistance Program

This is what we would like you to do:

Responsible for serving as the highest-level technical information security professional within the Credit Union and providing advanced security engineering, security operations, security architecture, threat detection, threat response, vulnerability management, and infrastructure security expertise across the enterprise technology environment. Primarily responsible for the implementation, administration, optimization, and continuous improvement of security technologies, controls, and monitoring capabilities that protect Credit Union systems, networks, data, and member information. 

Ensures security systems, applications, and technology infrastructure are implemented and maintained in accordance with regulatory requirements, industry best practices, organizational standards, and defense-in-depth principles. Serves as the senior technical resource for incident response, threat analysis, security investigations, vulnerability remediation, security testing, disaster recovery preparedness, and the protection of confidential member information. 

Partners closely with the VP Information Security Officer, Technology Department personnel, auditors, vendors, and business stakeholders to identify security risks, enhance control effectiveness, support compliance initiatives, strengthen operational resilience, and improve the overall security posture of the Credit Union.
 

Primary Job Duties:

•  Administers, engineers, and enhances enterprise information security systems and controls. 
• Serves as the primary technical subject matter expert for enterprise security technologies and security architecture. 
• Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems. 
• Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies. 
• Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications. 
• Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems. 
• Develops, maintains, and validates technical security baselines and configuration standards. 
• Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment. 
• Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices. 
• Leads enterprise vulnerability management and security remediation activities. 
• Oversees vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms. 
• Coordinates vulnerability scanning activities and reviews results for accuracy and remediation planning. 
• Performs technical analysis of security findings, penetration test results, audit findings, and vendor assessments. 
• Works directly with system administrators, engineers, vendors, and application owners to develop remediation plans. 
• Verifies completion and effectiveness of remediation activities through testing and validation. 
• Maintains vulnerability and remediation tracking records to support audit and compliance requirements. 
• Supports secure patch management practices and assists in establishing remediation priorities based on risk. 
• Performs advanced monitoring, threat detection, and incident response functions. 
• Investigates security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems. 
• Coordinates technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises. 
• Conducts root cause analysis and develops recommendations to reduce recurrence. 
• Works directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed. 
• Collects, preserves, and analyzes security event data and evidence required for investigations. 
• Develops and maintains detection use cases, alerting logic, dashboards, and monitoring capabilities. 
• Participates in incident response testing and recovery exercises. 
• Assists in execution of breach response procedures and containment activities when required. 

Education/Certification:

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred 
• One or more advanced industry related certifications 
• CISSP 
• CISM 
• GIAC certification 
• Security  
• CEH 
• SC-200 
• SC-300 
• SC-100 
• Azure Security Engineer Associate

Experience:

• Minimum 5 years of progressive experience in Information Security 
• 3 years working in a regulated financial services, banking, or credit union environment preferred. 
• Experience with vulnerability management, security monitoring, incident response, and regulatory compliance. 
• Experience supporting audits, examinations, or cybersecurity assessments

Knowledge, skills and abilities:

• In-depth knowledge and experience in the following information security areas:
• Microsoft 365 security technologies 
• Azure/Entra ID 
• Active Directory 
• SIEM platforms 
• EDR/XDR platforms 
• Network security technologies 
• Vulnerability management platforms 
• Identity and access management 
• Cloud security concepts 
• Email security systems 
• Security frameworks and regulatory requirements 
• Security monitoring platforms 
• Firewalls and intrusion prevention systems 
• Identity and access management solutions 
• SQL security configuration experience preferred 
• Ability to independently analyze complex technical and security issues and develop effective solutions. 
• Ability to make sound risk-based decisions under pressure and during incident response activities. 
• Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
• Strong analytical, troubleshooting, and problem-solving abilities. 
• Excellent written, verbal, and presentation communication skills. 
• Ability to communicate technical concepts effectively to both technical and non-technical audiences. 
• Strong organizational and project coordination skills. 
• Self-motivated, highly accountable, and capable of operating with minimal supervision. 
• Experience working effectively in a team-oriented and collaborative environment.

To apply for this exciting opportunity, visit our careers page at www.kirtlandcu.org/careers

Kirtland Credit Union is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.