Senior IT Security Administrator - ISO 27001 & PCI

Giesecke+Devrient; Bolingbrook (IL); On-site; USD 115,000 - 131,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid time off

Paid holidays

401K

Job summary

Giesecke+Devrient America, Inc. is seeking an Information Security Administrator III to oversee the information security program, maintain ISO 27001 and PCI certifications, and advise other departments on IT security. The role requires 5 years of IT security experience and security certifications.

The position involves supervising security staff, managing cryptographic key processes, and coordinating audits. Occasional travel and on-call readiness are expected.

Qualifications

• Associate degree in Computer Science or Information Systems.
• 5 years IT/Information Security experience, preferably in a financial service or similar industry.
• CISSP and/or CISA certification required.
• Audit and Compliance experience (PCI, ISO).

Responsibilities

• Administer and sustain ISO 27001, PCI, and related security certifications.
• Provide daily supervision of IT Security staff and tasks.
• Manage cryptographic key management program (PKI, keys, certificates).
• Coordinate internal and external security audits and ensure compliance.
• Develop and maintain information security training and risk assessment processes.
• Identify, report, and remediate IT security vulnerabilities.
• Design, document, and test the Incident Response Plan.
• Maintain configuration information for security appliances and systems.

Skills

ISO 27001

PCI DSS

CISSP

CISA

IT security

Education

Associate degree in CS/IS

Tools

Nmap

TCP/IP

Visio

MS Office

Job description

Giesecke+Devrient America, Inc. is seeking an Information Security Administrator III to oversee the information security program, maintain ISO 27001 and PCI certifications, and advise other departments on IT security. The role requires 5 years of IT security experience and security certifications.

The position involves supervising security staff, managing cryptographic key processes, and coordinating audits. Occasional travel and on-call readiness are expected.