IT Security Specialist

We are looking for an IT Security Specialist to strengthen and advance our cybersecurity program in Saint Johns, Michigan. This role will lead efforts to protect company systems, improve security standards, and support a resilient technology environment across endpoints, networks, cloud platforms, and business applications. The ideal candidate will combine hands-on technical expertise with program oversight, helping shape security strategy while responding effectively to operational risks and emerging threats.

Responsibilities:

• Administer and oversee secure access to company systems, including user accounts, endpoint permissions, IP-related controls, antivirus tools, cloud-based platforms, and security configuration issues.
• Maintain and optimize cybersecurity technologies such as endpoint protection, detection and response platforms, monitoring solutions, and security training systems to support daily defense operations.
• Monitor security events across the organization’s environment, investigate alerts from internal tools and external monitoring partners, and coordinate timely response to suspicious activity or service disruptions.
• Create and drive a forward-looking cybersecurity roadmap covering identity and access management, governance, risk reduction, incident response, disaster recovery, vulnerability management, and employee awareness initiatives.
• Establish and enforce secure configuration standards by managing asset inventories, documenting baseline requirements, auditing compliance, and supporting exception reviews where business needs require deviations.
• Lead system hardening efforts and support the creation and maintenance of standardized secure images for company devices and infrastructure.
• Contribute security guidance to future-state IT planning by reviewing architecture, evaluating infrastructure and cloud designs, and assessing application fit before deployment.
• Review and authorize software and application installations on company-owned laptops, desktops, mobile devices, and servers to ensure alignment with security expectations.
• Direct the security awareness program by delivering onboarding education, recurring training, and targeted instruction when elevated risks or new threats arise.
• Evaluate third-party IT suppliers from a security perspective, manage related service provider activities and contracts, and recommend technology or infrastructure improvements that strengthen protection of company data and systems.
• Demonstrated experience in cybersecurity, information security operations, or a closely related IT security role.
• Working knowledge of endpoint security, network protection, vulnerability response, and security event monitoring.
• Familiarity with identity and access management, security governance, risk management, and incident response practices.
• Experience supporting secure configuration management, system hardening, asset documentation, and compliance-oriented audits.
• Ability to assess software, infrastructure, and third-party vendors for security risk and operational fit.
• Understanding of data privacy principles, database security concepts, cloud-based business systems, and IP/network security controls.
• Proficiency with standard business software, including Microsoft Office, and the ability to communicate clearly through reports, metrics, and training materials.
• Strong analytical and troubleshooting skills with the ability to respond effectively during urgent security or service-impacting events.