Security Administrator

Children’s Hospital Association; Lenexa (KS); Hybrid; USD 82,000 - 166,000; Full time

Benefits offered by this job

Competitive pay

Medical insurance

Retirement plan

Hybrid work model

Health savings account contributions

Wellness program

PTO & personal days

Paid holidays

Parental leave

Job summary

Children’s Hospital Association is seeking a Security Administrator to join our Lenexa, KS team in a hybrid role. You will lead day-to-day security operations, administer cloud and on-prem environments, and advance our information security program.

You will integrate security tools with enterprise systems, manage identity and access governance, and support risk assessment, data protection, and regulatory compliance. Strong hands-on security experience and collaboration across teams are essential.

Qualifications

• Bachelor's degree in information security, IT, or related field, or equivalent experience.
• 3+ years in IT or information security administration, including at least 2 years in a security-focused role.
• Hands-on experience with Microsoft 365 security administration (Entra ID, Conditional Access, Purview, Defender) in a cloud or hybrid environment.
• Experience integrating systems and security tools using APIs, SSO, SCIM, and connectors; scripting or automation skills (PowerShell, Python, or low-code workflows).
• Working knowledge of NIST CSF, HIPAA, and/or ISO 27001, plus experience reviewing SOC2 evidence.
• Experience with vulnerability management, endpoint management, patching, and change management.
• Strong communication, documentation, and project management skills.

Responsibilities

• Implement, administer, and continuously improve integrations, automation, and workflows between security tools and enterprise systems to improve efficiency, visibility, and audit readiness.
• Support identity and access governance activities, including access reviews, least-privilege controls, password management, and external/vendor access administration.
• Support security risk management activities, including vendor assessments, technology reviews, audit readiness efforts, and data protection initiatives.
• Monitor vulnerability management, endpoint security, security awareness training, and operational security controls to help maintain a proactive security posture.
• Contribute to emerging security initiatives such as AI governance, Shadow IT management, and cloud security modernization efforts.
• Develop documentation, standards, and security processes that support consistency, scalability, and regulatory compliance across the organization.
• Collaborate cross-functionally to troubleshoot issues, implement improvements, and support ongoing security projects.

Skills

IT security administration

Microsoft 365 security

APIs & SSO integration

Vulnerability management

Documentation & project mgmt

Education

Bachelor's degree in information security or IT

Tools

PowerShell

Python

Low-code workflows

Entra ID / Microsoft 365

Job description

Security Administrator

Hybrid in Lenexa, KS

Join us in shaping a healthier future for kids. At Children’s Hospital Association, we unite more than 200 member hospitals to put children first—advancing care, informing policy, and driving progress together.

Where You’ll Work

This position is based in our Lenexa, Kansas office. We leverage a hybrid working model working three days in the office, two days optional remote work.

What You’ll Do

The Security Administrator is responsible for the day-to-day administration and continuous improvement of the information security control environment, with a primary focus on integrating information systems and security tools across on-premises and cloud environments. This role owns the recurring operational workload of the Information Security & Risk team, including identity and access governance, data protection, security awareness training, vulnerability and endpoint management, vendor/third-party risk assessment, and Shadow IT/AI governance.

• Implement, administer, and continuously improve integrations, automation, and workflows between security tools and enterprise systems to improve efficiency, visibility, and audit readiness.
• Support identity and access governance activities, including access reviews, least-privilege controls, password management, and external/vendor access administration.
• Support security risk management activities, including vendor assessments, technology reviews, audit readiness efforts, and data protection initiatives.
• Monitor vulnerability management, endpoint security, security awareness training, and operational security controls to help maintain a proactive security posture.
• Contribute to emerging security initiatives such as AI governance, Shadow IT management, and cloud security modernization efforts.
• Develop documentation, standards, and security processes that support consistency, scalability, and regulatory compliance across the organization.
• Collaborate cross-functionally to troubleshoot issues, implement improvements, and support ongoing security projects.

What You’ll Bring To CHA

Any combination of education and experience providing the required skill and knowledge is qualifying:

• Bachelor's degree in information security, IT, or related field, or equivalent experience.
• 3+ years in IT or information security administration, including at least 2 years in a security-focused role.
• Hands-on experience with Microsoft 365 security administration (Entra ID, Conditional Access, Purview, Defender) in a cloud or hybrid environment.
• Experience integrating systems and security tools using APIs, SSO, SCIM, and connectors; scripting or automation skills (PowerShell, Python, or low-code workflows).
• Working knowledge of NIST CSF, HIPAA, and/or ISO 27001, plus experience reviewing SOC2 evidence.
• Experience with vulnerability management, endpoint management, patching, and change management.
• Strong communication, documentation, and project management skills.

Preferred Qualifications

• Security certifications such as Security+, SSCP, CySA+, SC-300, SC-401, or AZ-500.
• Experience with third-party risk management or GRC platforms.
• Familiarity with AI governance, Shadow IT/SaaS discovery, and AI risk frameworks.
• Knowledge of incident response, disaster recovery, and business continuity practices.
• Experience building security metrics and dashboards.
• Training and facilitation skills.

Our Perks And Benefits

• Competitive total compensation package
• Medical, dental and vision insurance
• Retirement Savings program with generous company contribution
• Hybrid working model
• Health Savings Account with company contribution
• Wellness program
• Paid time off and personal days
• 9paid holidays
• Paid Parental Leave
• And more!

More About CHA

This pay rangeshown isa guideline. Min:$82,000 – $166,000 Compensation is based on factors such as qualifications, skill level, and competencies; compensation is based on therole'slocation and is subject to change based on work location.

CHA is committed to advancing diversity, equity and inclusion within our organization, our membership, the care delivery of children’s hospitals and their communities and through the federal policymaking environment. With children’s hospitals we strive to ensure organizational cultures where everyone feels valued and actively participates in the mission of our organizations. Racism stands firmly in the way of improving children’s health. We remain vigilant in our quest for a diverse and inclusive community and in standing against racism and discrimination wherever it exists.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin, and protected veteran status, or disability status.

Visa sponsorship is not available for this position.