Security Administrator

Location  

This position is considered office-first. An office-first employee can flex between in-office work and working from home based on personal or professional need, at the discretion of their supervisor.  An office-first employee maintains an office presence at least three days per week at their designated Scooter’s Coffee office location. Scooter’s Coffee is headquartered in Omaha, NE. The successful candidate lives in Omaha, NE. Relocation is not available for this role.  

? 

Description  

We are seeking a dedicated and experienced Security Administrator to own the security of the organization's (Organization includes Support Center, Supply Chain, and Retail Systems) assets, employees, and data. In this role, you'll be responsible for safeguarding our organization's various assets by protecting our endpoints, identities, and data. The ideal candidate will have hands-on experience with areas such as vulnerability management, security frameworks, and compliance standards, and will be comfortable developing and enforcing security policies and procedures. You will also be responsible for conducting security awareness training and responding to security incidents as they arise, ensuring our company's security posture remains strong and resilient.? 

Essential Duties and Responsibilities 

• Vulnerability Management: Regularly assess and address vulnerabilities in our organization's systems and applications. This includes conducting regular vulnerability scans, penetration testing, and managing remediation efforts. Must also stay informed on emerging and trending vulnerabilities in the news to be able to respond quickly.?? 
• Security Awareness Training: Manage our phishing training, and conduct training? for employees to raise awareness about security threats and best practices.? 
• Security Tool Administration: Administer and maintain the organization’s security tools such as firewalls, endpoint protection/AV software, and any future tools that may be added.? 
• Protect Data: Implement and maintain measures to protect the confidentiality, integrity, and availability of the organization's data.? 
• Policies & Procedures: Develop, implement, and enforce security policies and procedures that align with industry best practices and organizational requirements.? 
• Security Frameworks & Compliance: Ensure the organization's security posture aligns with relevant industry security frameworks and compliance standards, such as NIST, ISO 27001, or SOC 2.? 
• Protect Endpoints: Ensure all company endpoints (servers, workstations, tablets, etc.) are configured securely and protected from security threats.? 
• Protect Identities: Manage user identities and access controls to ensure that only authorized individuals can access sensitive systems and data. This includes implementing and maintaining multi-factor authentication (MFA), single sign-on (SSO), privileged identity management (PIM), conditional access, and general identity governance best practices.?? 
• Incident Response: Respond to security incidents, investigate breaches, and lead remediation efforts.? 
• Vendor Risk Assessments: Coordinate and review new and existing vendors on their security practices, frameworks/compliance standings, etc.?? 
• Security Monitoring: Proactively monitor security systems and logs for potential threats, and respond to alerts and incidents in a timely manner.? 
• Legal Holds/eDiscovery: Comply with HR/Legal to confidentially handle Legal Hold or eDiscovery requests, ensuring data is accurately captured, preserved, and delivered securely in a timely manner.   
• Physical Security: Coordinate with various facility leaders to ensure physical security is maintained, including security cameras, badges, etc.   
• Documentation: Regularly document processes and procedures as it pertains to your role to ensure adequate coverage, knowledge transfer, and cross-training opportunities.?? 
• Partner cross-functionally with the Retail Systems team(s) & vendors to ensure security best practices are being followed at all of the stores across the country.? 
• Partner cross-functionally with the Supply Chain team(s) & vendors to ensure security best practices are being followed in the Supply Chain world.?? 
• Travel may be required at times for potential conferences, vendor events, etc.? 
• Other duties as assigned.? 

Qualifications  

• Bachelor’s degree in Information/Cybe