Senior Security Administrator

Job Description:

Arine is seeking an Sr. Security Administrator to support our US operations. The Administrator will be providing support for security questionnaires, internal audits, SOP document management, and maintenance of system configurations. In addition, the Administrator will support IT staff with internal helpdesk tickets.

The Administrator must have advanced to expert knowledge of AWS with additional experience with MacOS, Windows, Google Workspace, MDM’s, and remote support technologies. All candidates must live within the United States and have his/her own high-speed internet service with a private location to work.

The position will report to the Head of Security and IT Infrastructure. Work hours are generally flexible, however, the Administrator must be able to support core business hours.

What You'll Be Doing:

• Manage and audit security configurations within Arine’s AWS environment
• Manage and perform processes, reviews, and audits of configurations, user access, and other settings.
• Manage and audit log reviews
• Interpret information security controls and policies and apply them to documents, reviews, processes, etc.
• Become an expert in all organizational policies and procedures and answer security questionnaires
• Create and update standard operating procedures and "How-To's" as needed
• Effectively communicate over remote sessions
• Help IT staff with internal helpdesk issues
• Maintain high satisfaction ratings among peers
• Manage Vulnerability Scans and Penetration Tests
• Keep up-to-date with potential threats and AWS updates

Who You Are and What You Bring:

• Minimum of 5 years of Information Security Administration
• Ability to pass background checks and drug screenings
• Degree in Information Technology, Information Security, Computer Science, or related field
• Experience in a cloud-based environment including Google Workspace and AWS
• Experience with Mobile Device Management
• Understanding of computing hardware technology and their associated operating systems
• Strong communication skills
• Ability to follow documented standard operating procedures
• Ability to develop standard operating procedures based on policies and changes to the environment
• Understanding of information security practices and HIPAA
• Understanding of managing information security standards as defined in an Information Security Management Program
• Understanding of ISO 27001, SOC 2 Type 2, and/or HITRUST CSF
• Ability to analyze issues, develop plans, and implement their solutions
• Must be able to speak, read, and write proficiently in the English language. The ability to understand issues over the phone and to clearly communicate instructions and guidance is essential for this position
• Must live in and be eligible to work in the United States
• Must have a private work location when working remotely including away from family and friends

Remote Work Requirements:

• An established private work area that ensures information privacy
• A stable high-speed internet connection for remote work

Perks:

Joining Arine offers you a dynamic role and the opportunity to contribute to the company's growth and shape its future. You'll have unparalleled learning and growth prospects, collaborating closely with experienced Clinicians, Engineers, Software Architects, and Digital Health Entrepreneurs.

The posted range represents the expected salary for this position and does not include any other potential components of the compensation package (including bonus and equity), benefits, and perks. Ultimately, the final pay decision will consider factors such as your experience, job level, location, and other relevant job-related criteria. The salary range for this position is: $135,000-155,000/year.

Job Requirements:

• Ability to pass a background check
• Must live in and be eligible to work in the United States

Information Security Roles and Responsibilities:

All staff at Arine are expected to be part of its Information Security Management Program and undergo periodic training on Information Security Awareness and HIPAA guidelines. Each user is responsible to maintain a secure working environment and follow all policies and procedures. Upon hire, each person is assigned and must complete trainings before access is granted for their specific role within Arine.