IT Security Administrator

About The Position

Serve as the primary technical resource for internal audits, external audits, compliance assessments, and customer security reviews.
Coordinate collection, validation, and organization of technical evidence supporting security and compliance requirements.
Maintain detailed knowledge of system architecture, network topology, security controls, cloud environments, endpoint management solutions, and operational processes.
Partners with Systems Administrators, Network Engineers, Security Engineers, and Infrastructure teams to obtain audit documentation and supporting evidence.
Document technical control implementations and operational procedures to support compliance initiatives.
Track audit requests and ensure timely delivery of required evidence and remediation documentation.
Review system configurations to verify compliance with organizational standards and regulatory requirements.
Support annual assessments related to HIPAA, SOC, NIST, CIS Controls, and other applicable compliance frameworks.
Assist with vulnerability management activities by gathering remediation evidence and validating corrective actions.
Maintain inventory documentation for systems, applications, endpoints, and infrastructure components.
Assist with development and maintenance of security policies, standards, procedures, and technical control documentation.
Support security incident investigations by collecting logs, system information, and technical evidence when required.
Develop reports and dashboards related to compliance status, audit findings, and remediation efforts.
Participate in risk assessments and security control reviews.
Coordinate remediation tracking and closure verification for audit findings and compliance deficiencies.

Minimum Requirements:

Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or equivalent experience.
3+ years of experience in either Systems Administration, Infrastructure Operations, or Security Operations.
Working knowledge of Windows Server, Active Directory, Microsoft 365, Azure, virtualization platforms, endpoint management systems, and enterprise networking concepts.
Experience supporting technical audits, compliance assessments, or regulatory reviews.
Understanding of identity and access management concepts and privileged account management.
Knowledge of vulnerability management processes and security control validation.
Experience gathering and organizing technical evidence for audits and assessments.
Strong understanding of enterprise infrastructure, system administration, and network architecture.
Excellent documentation, communication, and organizational skills.
Ability to manage multiple concurrent projects and audit requests.

Preferred Requirements:

Experience supporting HIPAA, SOC 1, SOC 2, NIST CSF, NIST 800-53, CIS Controls, ISO 27001, or similar compliance frameworks.
Experience with Microsoft Intune, MECM/SCCM, Azure AD/Entra ID, VMware, or cloud administration platforms.
Familiarity with SIEM, EDR, vulnerability management, and security monitoring platforms.
Experience with Jira, Confluence, or governance/risk/compliance tools.
Security certifications such as:
Security+
CySA+
SSCP
Experience supporting external auditors and third-party security assessments.