Senior IT Security Administrator: Lead Security & Compliance

County of Orange; Santa Ana (CA); On-site; USD 110,000 - 150,000; Full time

Job summary

County of Orange seeks a Senior IT Security Administrator to lead a security-analyst team protecting the Sheriff’s network and data. You will manage incident response, threat monitoring, and compliance with CJIS, NIST, ISO, PCI, and HIPAA while guiding architecture reviews for cloud, on-premises, and remote access.

You will collaborate across divisions, implement security controls, and ensure change management and documentation are maintained to support ongoing public-safety operations.

Qualifications

• Experience administering enterprise security technologies and policies.
• Ability to analyze endpoint, identity, network, email, and cloud telemetry.
• Investigate incidents, document findings, and coordinate remediation.
• Apply risk-based security controls and maintain compliance.
• Ability to communicate risk to technical and executive audiences.

Responsibilities

• Supervise a team of security analysts ensuring protection of OC Sheriff network.
• Monitor telemetry, validate alerts, contain incidents, and document in ServiceNow.
• Administer and tune security platforms and detection rules.
• Support audits and CJIS/NIST/ISO/PCI/HIPAA compliance.
• Collaborate with stakeholders to resolve security issues enterprise-wide.
• Maintain security standards, runbooks, and change-management processes.
• Participate in after-hours incident response and on-call coverage.

Skills

Security incident response

Threat monitoring

Team leadership

Policy compliance

Vulnerability management

Education

Bachelor's degree in Computer Science or related field

CISSP or equivalent certification

Tools

Palo Alto XSIAM/XDR

Active Directory / Entra ID

Microsoft 365 security

SIEM/SOAR tools

ServiceNow

Job description

County of Orange seeks a Senior IT Security Administrator to lead a security-analyst team protecting the Sheriff’s network and data. You will manage incident response, threat monitoring, and compliance with CJIS, NIST, ISO, PCI, and HIPAA while guiding architecture reviews for cloud, on-premises, and remote access.

You will collaborate across divisions, implement security controls, and ensure change management and documentation are maintained to support ongoing public-safety operations.