Information Security Administrator

Akkodis; Aurora (OH); On-site; USD 90,000 - 95,000; Full time

Job summary

Akkodis is seeking an Information Security Administrator for an onsite role in Aurora, OH. This full-time position focuses on hands-on security administration and driving improvements to the organization's security posture.

The ideal candidate has 4+ years in information security, experience with Zero Trust, endpoint and email security, phishing response, and familiarity with NIST/CIS; KnowBe4 or Proofpoint are a plus.

Qualifications

• 4+ years of experience in information security, IT security, or hands-on security
• Hands-on experience with asset management, endpoint security, email security, or Zero Trust platforms
• Understanding of phishing, malware, ransomware, and social engineering
• Strong organizational and communication skills in a fast-paced environment
• Ability to coordinate with IT, engineering, and operations teams

Responsibilities

• Administer and optimize Zero Trust platform and policies
• Monitor endpoint protection tools and triage alerts
• Administer spam filtering and email security systems
• Coordinate security awareness training programs and phishing simulations
• Track security score/rating trends and remediation efforts
• Maintain documentation of security configurations and runbooks
• Review security logs and coordinate incident response

Skills

Zero Trust

Endpoint security

Email security

Phishing response

Security awareness training

NIST/CIS familiarity

Tools

KnowBe4

Proofpoint

Job description

Akkodis is seeking an Information Security Administrator role is a Full-time with a clientin Aurora, OH (Onsite), We're looking for an applicant with experience in information security, including Zero Trust, endpoint protection, email security, phishing response, and security awareness training, with familiarity in NIST/CIS frameworks and security tools like KnowBe4 or Proofpoint being a plus.

Salary Range: $90k-95k/annum + Benefits; The salary may be negotiable based on experience, education, geographic location, and other factors.

Position Summary

• The Information Security Administrator is responsible for the day-to-day administration and continuous improvement of the organization's information security program.
• This role goes beyond monitoring and reporting on security events; the Administrator actively administers security tools, follows through with remediation activities as part of the team, is responsible for measurable improvement in the organization's security posture (e.g., security score, risk rating), coordinates and supports security awareness efforts across the organization.
• This is a hands-on, execution-focused role for someone who can operate effectively in a fast-paced engineering and manufacturing environment to take ownership of security tasks where responsiveness, prioritization, and practical problem-solving are essential.

Key Responsibilities

Zero Trust & Endpoint Security

• Administer and optimize Zero Trust platform, including application allow listing, ringfencing, storage control, and policy tuning.
• Continuously refine Zero Trust policies to balance security requirements, production continuity, and user productivity.
• Monitor endpoint protection tools, triage alerts, document exceptions, and coordinate follow-up actions with the IT team.

Email & Spam Security

• Administer spam filtering and email security systems, including configuration, tuning, quarantine review, and exception handling.
• Triage phishing attempts, spoofing, and email-based threats; document findings; coordinate remediation; and escalation where appropriate.
• Coordinate with IT to review and update mail flow rules, spam policies, allow/block lists, and related email security controls as threats evolve.

Security Awareness & Training

• Responsible for managing all aspects of the security awareness training program, including phishing simulations, training assignments, reporting and tracking.
• Analyze training and simulation results to identify high-risk users or departments and adjust programs accordingly
• Communicate security best practices and emerging threats to staff

Security Posture & Score Management

• Track security score/rating trends, identify contributing factors, and coordinate improvement activities across assigned tools and teams.
• Identify gaps in the security stack, document recommended remediation steps and assist with implementation or coordination as assigned.
• Track, prioritize, and coordinate closure of open security findings, vulnerabilities, and misconfigurations with appropriate owners.

Security Stack Administration

• Administer and maintain assigned information security tools, including endpoint protection, email security, Zero Trust, awareness training, and related platforms.
• Participate in evaluating new security tools and vendors by documenting gaps, gathering requirements, and supporting implementation planning as assigned.
• Maintain current documentation of security configurations, policies, and procedures exceptions, and operational runbooks.

Monitoring & Response

• Review security logs and alerts to triage anomalies, document findings, and coordinate escalation as needed.
• Coordinate incident response activities, including documentation, stakeholder communication, escalation, and remediation follow-up.
• Escalate significant threats or incidents to leadership per incident response procedures

Compliance & Reporting

• Prepare regular reports on security posture, training completion, remediation progress, and incident metrics for leadership review.
• Support audits and compliance efforts (e.g., SOC 2, , cyber insurance requirements) as needed
• Maintain up-to-date policies and procedures aligned with industry frameworks (e.g., NIST, CIS Controls)

Qualifications

Required

• 4+ years of experience in an information security, IT security, or systems administration, infrastructure operations, or a related hands-on technical role.
• Hands-on experience with asset management, endpoint security, email security, or Zero Trust platforms
• Understanding of common threat vectors: phishing, malware, ransomware, social engineering
• Strong organizational skills with the ability to manage multiple security tools, open remediation items, and competing priorities in a fast-paced operational environment.
• Clear written and verbal communication skills, including the ability to explain security concepts to non-technical staff and coordinate the next practical steps with the IT, engineering, and operations teams.

Preferred

• Experience running a security awareness training program (e.g., KnowBe4, Proofpoint)
• Familiarity with security frameworks (NIST CSF, CIS Controls) and compliance requirements relevant to the industry
• Relevant certifications: Security+, CySA+, GSEC, or similar (not always required, but a plus)

Equal Opportunity Employer/Veterans/Disabled

Benefits offerings include but are not limited to:

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers