Sr Information Security Administrator

Kirtland Credit Union; Albuquerque (NM); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

401(k) Retirement savings program

401(k) employer match

Paid time off with accrual starting on

11 Paid holidays off during the year

Tuition Reimbursement

Employee Clothing Advance

Fitness Reimbursement Program

Employer paid Life Insurance

Employee Assistance Program

Employer paid Short- and Long-Term

Disability Insurance

Travel Assistance Program

Job summary

Kirtland Credit Union is seeking a Senior Information Security Administrator to lead security engineering, operations, and threat response across the enterprise. The role focuses on implementing and optimizing security controls, monitoring capabilities, and vulnerability management to protect member data.

The position supports hybrid or fully remote arrangements for the strongest candidate, with regulatory compliance and defense-in-depth as guiding principles.

Qualifications

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred
• One or more advanced industry related certifications
• CISSP
• CISM
• GIAC certification
• Security+
• CEH
• SC-200
• SC-300
• SC-100
• Azure Security Engineer Associate

Responsibilities

• Administers and enhances enterprise information security systems and controls.
• Designs, implements, configures, and maintains security solutions including EDR/XDR, SIEM, vulnerability management, data protection, and access controls.
• Leads vulnerability management and remediation activities across platforms.
• Performs advanced monitoring, threat detection, and incident response functions.
• Coordinates with SOC providers, vendors, and stakeholders to improve security posture.

Skills

Security leadership

Incident response

Threat analysis

Risk assessment

Security governance

Communication skills

Education

Bachelor's degree in IT/Info Sec/CS

CISSP

CISM

GIAC certification

Security+ or CEH

SC-200

SC-300

SC-100

Azure Security Engineer Associate

Tools

Microsoft 365 security technologies

Azure/Entra ID

Active Directory

SIEM platforms

EDR/XDR platforms

Network security technologies

Vulnerability management platforms

Identity and access management

Cloud security concepts

Email security systems

Job description

Working at Kirtland CU is more than a job‑it’s a career, and one in the financial world! We pride ourselves on helping our employees learn, grow, and advance in any direction they choose. We offer a highly competitive salary, great benefits package and an energetic, vibrant work environment.

We are currently seeking a Senior Information Security Administrator to join Kirtland Credit Union! This is a regular, full-time position. We welcome applications from both local and remote candidates. While hybrid work offers some additional opportunities for in-person collaboration, we are flexible and prepared to support a fully remote arrangement for the best candidate.

Join the rest of our teammates and become eligible for a generous benefits package that we offer:

• Medical, Dental and Vision Insurance
• 401(k) Retirement savings program
• 401 (k) employer match
• Paid time off with accrual starting from day one.
• 11 Paid holidays off during the year!
• Tuition Reimbursement for College Degrees
• Employee Clothing Advance
• Fitness Reimbursement Program
• Employer paid Life Insurance
• Employee Assistance Program
• Employer paid Short- and Long-Term Disability Insurance
• Travel Assistance Program

This is what we would like you to do:

Responsible for serving as the highest-level technical information security professional within the Credit Union and providing advanced security engineering, security operations, security architecture, threat detection, threat response, vulnerability management, and infrastructure security expertise across the enterprise technology environment. Primarily responsible for the implementation, administration, optimization, and continuous improvement of security technologies, controls, and monitoring capabilities that protect Credit Union systems, networks, data, and member information.

Ensures security systems, applications, and technology infrastructure are implemented and maintained in accordance with regulatory requirements, industry best practices, organizational standards, and defense-in-depth principles. Serves as the senior technical resource for incident response, threat analysis, security investigations, vulnerability remediation, security testing, disaster recovery preparedness, and the protection of confidential member information.

Partners closely with the VP Information Security Officer, Technology Department personnel, auditors, vendors, and business stakeholders to identify security risks, enhance control effectiveness, support compliance initiatives, strengthen operational resilience, and improve the overall security posture of the Credit Union.

Primary Job Duties:

• Administers, engineers, and enhances enterprise information security systems and controls.
• Serves as the primary technical subject matter expert for enterprise security technologies and security architecture.
• Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
• Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies.
• Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
• Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
• Develops, maintains, and validates technical security baselines and configuration standards.
• Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
• Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.
• Leads enterprise vulnerability management and security remediation activities.
• Oversees vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms.
• Coordinates vulnerability scanning activities and reviews results for accuracy and remediation planning.
• Performs technical analysis of security findings, penetration test results, audit findings, and vendor assessments.
• Works directly with system administrators, engineers, vendors, and application owners to develop remediation plans.
• Verifies completion and effectiveness of remediation activities through testing and validation.
• Maintains vulnerability and remediation tracking records to support audit and compliance requirements.
• Supports secure patch management practices and assists in establishing remediation priorities based on risk.
• Performs advanced monitoring, threat detection, and incident response functions.
• Investigates security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems.
• Coordinates technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises.
• Conducts root cause analysis and develops recommendations to reduce recurrence.
• Works directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
• Collects, preserves, and analyzes security event data and evidence required for investigations.
• Develops and maintains detection use cases, alerting logic, dashboards, and monitoring capabilities.
• Participates in incident response testing and recovery exercises.
• Assists in execution of breach response procedures and containment activities when required.

Education/Certification:

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred
• One or more advanced industry related certifications
• CISSP
• CISM
• GIAC certification
• Security+
• CEH
• SC-200
• SC-300
• SC-100
• Azure Security Engineer Associate

Experience:

• Minimum 5+ years of progressive experience in Information Security
• 3+ years working in a regulated financial services, banking, or credit union environment preferred.
• Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
• Experience supporting audits, examinations, or cybersecurity assessments

Knowledge, skills and abilities:

• In-depth knowledge and experience in the following information security areas:
• Microsoft 365 security technologies
• Azure/Entra ID
• Active Directory
• SIEM platforms
• EDR/XDR platforms
• Network security technologies
• Vulnerability management platforms
• Identity and access management
• Cloud security conceptsEmail security systems
• Security frameworks and regulatory requirements
• Security monitoring platforms
• Firewalls and intrusion prevention systems
• Identity and access management solutions
• SQL security configuration experience preferred
• Ability to independently analyze complex technical and security issues and develop effective solutions.
• Ability to make sound risk-based decisions under pressure and during incident response activities.
• Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent written, verbal, and presentation communication skills.
• Ability to communicate technical concepts effectively to both technical and non-technical audiences.
• Strong organizational and project coordination skills.
• Self‑motivated, highly accountable, and capable of operating with minimal supervision.
• Experience working effectively in a team-oriented and collaborative environment.

Kirtland Credit Union is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.