Information Assurance Security Administrator

FULL-TIME Full-time LOCATION 1265 Laurel Tree Lane Suite 200 Carlsbad CA 92011 Job Summary The Information Assurance Security Administrator will collaborate with the information assurance team to achieve the 24 Hour Fitness-wide Information Assurance product goal and provide metric based reporting for security implementation and compliance. The role performs system analysis techniques and procedures, determines hardware, software, or system security specifications, documents and analyzes testing or modification of security systems or programs, develops methodologies to track interdependencies of critical assets, monitors an organizational security architecture plan, performs end-to-end IT security assessments, and administers organization level monitoring systems while conducting manual cyber‑security threat discovery (threat hunting). Essential Duties & Responsibilities Policies and Procedures Collaborate with the Information Assurance team to produce documentation that demonstrates or supports the information assurance product goal using internal documentation, industry standards, and federal/state legislation (e.g., CIS CSC 18, NIST CSF, PCI, CCPA). Develop and maintain IT Security Systems and Infrastructure Security. Develop and maintain the enterprise-wide threat model. Review and maintain internal security policies and procedures. Compliance and Enforcement Update and maintain organizational PCI compliance documentation. Assist with investigations of internal policy infractions. Identify and document cyber‑security risks and develop risk mitigation plans. Infrastructure Support and Initiatives Implement and maintain IT Security Architecture documentation. Develop methodology to track interdependencies of critical assets with external entities. Research, develop, document, and implement tracking and inventory methodologies for critical assets (hardware and software). Audit and Assessment Assist with internal and external assessments of 24 Hour Fitness's IT Security posture. Perform internal auditing procedures of organizational IT controls and policy compliance. Design, implement, document, and evaluate computer security programs. Incident Response Participate as a member of the Computer Security Incident Response Team (CSIRT). Proactively search for and identify cyber‑security threats to the enterprise. Security Training and Awareness Produce end user documentation and security awareness training materials. Provide in-person security awareness training. Other duties as assigned by manager. Organization Relationships The Information Assurance Security Administrator reports to the Information Assurance Manager, assists with audits and investigations, and participates in Information Assurance Scrum Team events as required. Required Qualifications Knowledge, Skills & Abilities Experience working with CIS CSC 18 computer security programs. Familiarity with Payment Card Industry (PCI) standards and assessment process. Experience with network and host-based intrusion detection and prevention. Understanding and familiarity with computer forensic analysis tools and methodologies. Proficiency in Firewall, UNIX, Microsoft Systems, and Application security and auditing. Experience with writing computer security policy documentation. Strong verbal and written communication skills. Minimum Educational Level/Certifications Associate's degree in a related field or relevant professional experience. Security+ or equivalent entry‑level certification. Minimum Work Experience and Qualifications 1+ years experience in a related field. Physical Demands / Environmental Conditions Normal day-to-day business operations including using a keyboard, walking, bending and reaching. Travel Requirement Travel is not routine but may be required. Preferred Qualifications Knowledge, Skills & Abilities Proficiency in Python. Familiarity with penetration testing techniques and tools. Familiarity with Agile values and principles. Familiarity with the Scrum pillars as well as Scrum values and principles. Experience with auditing and gathering evidence in support of audit findings. Experience writing reports of findings related to audits and tests. Educational Level/Certifications CASP and/or SANS GIAC certification strongly desired. If the candidate does not possess the CASP certification upon being hired, the candidate will be required to obtain the certification within one calendar year of being hired. Work Experience and Qualification Previous experience in either a publicly traded company or government entity. Experience with vulnerability scanning. Exposure to software security testing. Understanding of application and system logging and analysis. Benefits Summary 24 Hour Fitness offers benefit programs designed to meet the diverse needs of all team members, including health coverage, group life and accident insurance, and other corporate benefits. Benefit‑eligible team members may accrue vacation hours and receive a complimentary membership. All employees also receive an Employee Assistance Program (EAP), basic group life and accident insurance, and a 401(k) savings and investment plan. Employees working 30 hours or more per week receive additional medical/dental/vision benefits, paid time off, and sickness benefits. Compensation Summary Salary range varies by geography and experience. Pay ranges for various California regions are provided in the original posting. Actual offers may vary based on location, work experience, and education. #J-18808-Ljbffr