Security & IT Administrator

As a Security & IT Administrator at Culture On Camera's client, you'll be responsible for managing internal IT infrastructure while leading security initiatives. Key responsibilities include maintaining security policies, conducting risk assessments, supporting compliance certifications, and overseeing incident response strategies. You'll also be essential in developing employee training programs to promote security awareness across the organization.

Candidates must have a minimum of 5 years of experience in IT administration and information security, particularly in SaaS environments. Proficiency in managing Google Workspace and understanding security frameworks like SOC 2 and ISO 27001 is crucial. Additionally, experience with cloud security, strong documentation skills, and knowledge of DevOps processes are important qualifications for this role.

The Security & IT Administrator plays a pivotal role in ensuring compliance within the company by overseeing processes related to SOC 2 and ISO 27001. This includes conducting vendor assessments, responding to customer security inquiries, and managing the overall security posture of the organization. You will also help maintain a risk register and develop policies that uphold industry standards for data protection.

Important skills for a Security & IT Administrator include a solid understanding of security frameworks, proficiency with cloud technology (especially Google Cloud), and expertise in incident response and endpoint security solutions. Excellent documentation and communication skills are necessary to effectively articulate security measures and foster a culture of compliance within the team.

Culture On Camera's client provides a robust benefits package that includes a 401(k) retirement savings plan with employer matching, comprehensive health, dental, and vision insurance, life insurance coverage, and an employee assistance program. You will also enjoy generous paid time off, opportunities for professional development, and a supportive work environment that values continuous learning.

To enhance security policies, I would conduct a thorough analysis of existing frameworks and identify potential gaps. Implementing regular training for employees to familiarize them with security practices is key. Collaborating with department heads to incorporate security measures into their workflows ensures a company-wide commitment to compliance.

I keep informed by subscribing to cybersecurity journals, following industry leaders on social media, and participating in webinars. Networking with other professionals at conferences and joining relevant online communities also helps in exchanging knowledge and best practices.

I have extensive experience managing security in cloud environments, particularly Google Cloud. This includes configuring IAM roles, implementing VPCs for segmentation, and employing monitoring tools to detect anomalies. Specifically, I've worked on ensuring that access controls are strictly enforced and that data encryption is properly configured.

I believe in developing a detailed incident response plan that outlines clear roles and responsibilities. Conducting regular drills and simulations ensures that all team members are aware of procedures. Post-incident reviews allow us to improve upon our response strategies continually.

I utilize tools such as SIEM platforms for monitoring logs, endpoint protection software for device security, and cloud security posture management tools to maintain compliance with best practices. These tools help me ensure that threats are detected and mitigated proactively.

If a security breach occurred, my first step would be to activate the incident response plan, securing affected systems immediately to prevent further damage. After containing the breach, I would conduct a thorough investigation to identify the cause, document findings, and communicate transparently with stakeholders regarding the incident.

My experience includes performing annual risk assessments to evaluate the potential vulnerabilities in our IT frameworks. I develop assessments tailored to the unique needs of the organization, and I prioritize findings based on potential impact and likelihood, leading to actionable remediation plans.

In my previous role, I led the initiative to adopt multi-factor authentication across the organization. I conducted training sessions for staff, worked closely with IT to integrate the solution seamlessly, and realized a significant decrease in unauthorized access incidents as a result.

I collaborate closely with development teams to integrate security into each phase of the software development lifecycle. This includes training developers on secure coding practices and conducting regular security testing during development, ensuring that vulnerabilities are addressed before deployment.

Today, ransomware and phishing attacks remain two of the most significant threats to IT security, alongside the challenges posed by insider threats and the complexities of managing remote access. Staying ahead of these threats requires constant vigilance and a proactive approach to security practices.