Information Security Administrator

Overview

We are looking for a knowledgeable Information Security Administrator to enhance and support our Information Security operations. This position involves managing daily security activities, ensuring adherence to governance frameworks, overseeing security policies and procedures, and aiding risk management efforts throughout the company. The role works directly with the Chief Information Security Officer (CISO), collaborating with the internal security team along with a Managed Security Operations Center (SOC) partner to protect the confidentiality, integrity, and availability of corporate information assets while complying with regulatory and industry standards.

Key Responsibilities

• Manage and supervise the organization's daily information security operations.
• Coordinate with internal security teams and the Managed SOC partner to detect, evaluate, and respond to security incidents.
• Assist in incident management, vulnerability remediation, and continuous security monitoring.
• Ensure the proper application of security controls across IT infrastructure and business systems.
• Support the maintenance of the company's Governance, Risk, and Compliance (GRC) framework for information security.
• Perform security risk assessments and track mitigation actions.
• Conduct security evaluations of third-party vendors and ensure compliance.
• Ensure compliance with organizational policies, legal regulations, and relevant industry standards.
• Participate in audit procedures and assist in resolving audit findings.
• Create, update, and maintain security policies, standards, procedures, guidelines, and Standard Operating Procedures (SOPs), aligned with regulatory and business changes.
• Promote organization-wide awareness and compliance with security policies.
• Engage in security governance activities, including data protection, privacy projects, AI governance, and emerging technology security initiatives.
• Identify, evaluate, and monitor information security risks and recommend controls to address them.
• Contribute to business continuity planning and disaster recovery governance, including participation in Business Impact Analysis and continuity exercises.
• Collaborate with IT infrastructure, application, risk management, compliance, audit, and business teams to implement security measures.
• Interface with external auditors, regulators, consultants, and vendors as needed.
• Provide expert security advice and recommendations to business stakeholders.
• Stay updated on emerging cyber threats, vulnerabilities, and best practices, and suggest improvements for security governance and processes.
• Support initiatives that foster a security-conscious organizational culture.

Required Qualifications & Certifications

• Bachelor's degree in Information Security, Cyber Security, Computer Science, Information Technology, Computer Engineering, or related fields.
• Professional certifications preferred include ISO/IEC 27001 Lead Implementer or Lead Auditor, CISSP, CISM, CompTIA Security+, CRISC, and CEH (considered an advantage).

Experience

• Between 5 and 6 years of relevant experience in areas such as Information Security, Governance, Risk & Compliance (GRC), or Cyber Security.
• Preferably experienced in regulated sectors like Insurance, Banking, Financial Services, or Healthcare.
• Exposure to supporting Managed Security Operations Center (SOC) environments is beneficial.

Technical Expertise

• Information security governance and compliance frameworks.
• Risk assessment and management methodologies.
• Developing and managing security policies and procedures.
• Third-party and vendor risk evaluation.
• Conducting security audits and compliance reviews.
• Business continuity planning and disaster recovery processes.
• Coordination of security incident responses.
• Data protection and privacy compliance.
• Creation and maintenance of security documentation and SOPs.
• Regulatory compliance and AI governance awareness.
• Vulnerability management and security control assessments.

Key Competencies

• Exceptional analytical and problem-solving capabilities.
• Strong communication and stakeholder engagement skills.
• Meticulous attention to detail and documentation proficiency.
• Deep understanding of security governance principles.
• Ability to manage several priorities effectively in a fast-paced setting.
• Proactive team player who drives security improvements collaboratively.

Preferred Sector Experience

• Experience in Insurance, Banking & Financial Services, or Healthcare industries.
• Familiarity with large enterprise IT environments.
• Background in information security governance and compliance.
• Experience with managed security services, including SOC operations.