Information Security Administrator

Akkodis is seeking an Information Security Administrator role is a Full-time with a clientin Aurora, OH (Onsite), We're looking for an applicant with experience in information security, including Zero Trust, endpoint protection, email security, phishing response, and security awareness training, with familiarity in NIST/CIS frameworks and security tools like KnowBe4 or Proofpoint being a plus. Salary Range: $90k-95k/annum + Benefits; The salary may be negotiable based on experience, education, geographic location, and other factors. Position Summary The Information Security Administrator is responsible for the day-to-day administration and continuous improvement of the organization's information security program. This role goes beyond monitoring and reporting on security events; the Administrator actively administers security tools, follows through with remediation activities as part of the team, is responsible for measurable improvement in the organization's security posture (e.g., security score, risk rating), coordinates and supports security awareness efforts across the organization. This is a hands-on, execution-focused role for someone who can operate effectively in a fast-paced engineering and manufacturing environment to take ownership of security tasks where responsiveness, prioritization, and practical problem-solving are essential. Key Responsibilities Zero Trust & Endpoint Security Administer and optimize Zero Trust platform, including application allow listing, ringfencing, storage control, and policy tuning. Continuously refine Zero Trust policies to balance security requirements, production continuity, and user productivity. Monitor endpoint protection tools, triage alerts, document exceptions, and coordinate follow-up actions with the IT team. Email & Spam Security Administer spam filtering and email security systems, including configuration, tuning, quarantine review, and exception handling. Triage phishing attempts, spoofing, and email-based threats; document findings; coordinate remediation; and escalation where appropriate. Coordinate with IT to review and update mail flow rules, spam policies, allow/block lists, and related email security controls as threats evolve. Security Awareness & Training Responsible for managing all aspects of the security awareness training program, including phishing simulations, training assignments, reporting and tracking. Analyze training and simulation results to identify high-risk users or departments and adjust programs accordingly Communicate security best practices and emerging threats to staff Security Posture & Score Management Track security score/rating trends, identify contributing factors, and coordinate improvement activities across assigned tools and teams. Identify gaps in the security stack, document recommended remediation steps and assist with implementation or coordination as assigned. Track, prioritize, and coordinate closure of open security findings, vulnerabilities, and misconfigurations with appropriate owners. Security Stack Administration Administer and maintain assigned information security tools, including endpoint protection, email security, Zero Trust, awareness training, and related platforms. Participate in evaluating new security tools and vendors by documenting gaps, gathering requirements, and supporting implementation planning as assigned. Maintain current documentation of security configurations, policies, and procedures exceptions, and operational runbooks. Monitoring & Response Review security logs and alerts to triage anomalies, document findings, and coordinate escalation as needed. Coordinate incident response activities, including documentation, stakeholder communication, escalation, and remediation follow-up. Escalate significant threats or incidents to leadership per incident response procedures Compliance & Reporting Prepare regular reports on security posture, training completion, remediation progress, and incident metrics for leadership review. Support audits and compliance efforts (e.g., SOC 2, , cyber insurance requirements) as needed Maintain up-to-date policies and procedures aligned with industry frameworks (e.g., NIST, CIS Controls) Qualifications Required 4+ years of experience in an information security, IT security, or systems administration, infrastructure operations, or a related hands-on technical role. Hands-on experience with asset management, endpoint security, email security, or Zero Trust platforms Understanding of common threat vectors: phishing, malware, ransomware, social engineering Strong organizational skills with the ability to manage multiple security tools, open remediation items, and competing priorities in a fast-paced operational environment. Clear written and verbal communication skills, including the ability to explain security concepts to non-technical staff and coordinate the next practical steps with the IT, engineering, and operations teams. Preferred Experience running a security awareness training program (e.g., KnowBe4, Proofpoint) Familiarity with security frameworks (NIST CSF, CIS Controls) and compliance requirements relevant to the industry Relevant certifications: Security+, CySA+, GSEC, or similar (not always required, but a plus) Equal Opportunity Employer/Veterans/Disabled Benefits offerings include but are not limited to: The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable: The California Fair Chance Act Los Angeles City Fair Chance Ordinance Los Angeles County Fair Chance Ordinance for Employers #J-18808-Ljbffr