Security Administrator - (Governance, Risk, Compliance)

Michels; Brownsville (WI); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Health benefits

Dental insurance

Life insurance

HSA/FSA programs

401(k) plan

Training opportunities

Job summary

Michels Corporation is seeking a Security Administrator II to oversee governance, risk, and compliance, monitor security devices while providing guidance during app development. The role emphasizes maintaining HSEQ culture and compliance, plus security incident response and vulnerability management.

Responsibilities include reviewing designs for vulnerabilities, monitoring systems, auditing user activity, performing scans, and supporting regulatory requirements across the enterprise.

Qualifications

• Bachelor’s Degree in IT or related field; 5-8 years of relevant experience, 3-5 in information security.
• SSCP certification required.
• Competent with networking, hardware, software, and server systems technologies.
• Competent with parsing security and server logs.
• Competent with IT security best practices; ACLs, VPNs and complex routing.

Responsibilities

• Maintain a strong safety culture and follow health, safety, and environmental policies.
• Review infrastructure designs for security vulnerabilities against best practices.
• Monitor and report on corporate security systems and applications.
• Analyze and resolve security breaches and vulnerabilities.
• Support forensic activities and digital evidence collection for incidents.
• Conduct user activity audits and support regulatory requirements.
• Perform internal/NOC scans and external penetration testing.
• Escalate Service Desk incidents as needed.
• Review router/firewall ACLs for security best practices and policies.
• Regulate physical security systems such as cameras and access control.
• Review security of enterprise software code and suggest changes.
• Adhere to IT and corporate security standards and policies.

Skills

Networking

Security logs analysis

IT security best practices

ACLs & VPNs

Router/firewall knowledge

Office suite proficiency

Education

Bachelor's degree in IT or related field

Bachelor's degree in CS/InfoSec (DESIRED)

Tools

Check Point firewalls

Linux operating systems

SaaS security concepts

Job description

Security Administrator - (Governance, Risk, Compliance)

Improving America’s infrastructure isn’t for the weak. It takes grit, determination, and hard work to execute high impact projects. Michels Corporation engages 8,000 people and 18,000 pieces of heavy equipment in our insatiable drive to be the best. Our work improves lives. Find out how a career as a IT Technical Architect II (Cloud Operations) can change yours.

A Security Administrator II (Governance, Risk, Compliance) monitors corporate security devices and applications. Provides oversight for physical security systems. Provides security consultancy during application development. Critical for success are professional management and communication skills.

• Maintain and promote a strong health, safety, environment, and quality (HSEQ) culture for all employees, vendors, subcontractors, and customers to comply with HSEQ policies, procedures, regulations, and continual improvement objectives. Identify and communicate workplace hazards and risks with a commitment to correct or seek assistance in correcting unsafe or nonconforming actions or conditions.
• We are consistently ranked among the top 10% of Engineering News-Record’s Top 400 Contractors
• Our steady, strategic growth revolves around a commitment to quality
• We are family owned and operated
• We invest an average of $5,000 per employee on training each year
• We reward hard work and dedication with limitless opportunities
• We believe it is everyone’s responsibility to promote safety, regardless of job titles.
• We offer a comprehensive benefits program, including Health, Dental, Life, Flexible Spending Accounts, Health Savings Account, Short Term and Long-Term Disability Insurance, 401(k) plan, Legal Plan, and Identity Theft and Monitoring Plan. Depending on your positions and location you may participate in a different benefit plan.

Key Responsibilities:

• Maintain and promote a strong safety culture for all employees, vendors, and customers and follow all health, safety and environmental policies, procedures, and regulations. Identify and communicate workplace hazards and correct or seek assistance in correcting unsafe actions or conditions.
• Review infrastructure designs for security vulnerabilities, and policies in light of security best practices and information security policies.
• Monitor, analyze and report on corporate security systems and security applications.
• Analyzes and resolves security breaches and vulnerability issues.
• Support forensic activities and digital review/evidence collection for security incidents.
• Conducts user activity audits and supports business regulatory requirements.
• Perform internal network vulnerability scanning and external penetration testing and resolve issues.
• Support business regulatory requirements.
• Act as a point of escalation for Service Desk incidents and requests.
• Understand and review current and future router and firewall access control lists for security best practices, vulnerabilities, and policies.
• Regulate physical security systems: security camera systems and access control systems.
• Review security of enterprise software code.
• Adhere to IT and corporate standards and security policies. Assist with recommendations for changes to existing or suggest new security standards and policies associated with risk mitigation and security event response.
• Other duties as assigned.

Qualifications and Skills

• Bachelor’s Degree in Information Technology or related field, 5-8 years of relevant experience, with 3-5 years in information security, or equivalent combination
• Systems Security Certified Practitioner (SSCP) certification
• Competent with networking, hardware, software, and server systems technologies
• Competent with parsing security and server logs
• Competent in IT security best practices
• Competent with router/firewall access control lists (ACLs), virtual private networks (VPNs), and complex routing scenarios.
• Proficient with Microsoft Office, Microsoft Project, Microsoft Visio, and two latest versions of Microsoft Windows

Desired Qualifications:

• Bachelor’s Degree in Computer Science, Information Security or a related field
• Certified Information Systems Security Professional (CISSP) or Certified Secure Software Lifecycle Professional (CSSLP) Certification
• Familiar with Software as a Service (SaaS) security concepts
• Understanding of application development best practices
• Experience with Linux operating systems, Checkpoint firewalls, and various scripting languages

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Michels Corporation’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.