Cybersecurity Administrator

Tri Star Energy is seeking an experienced and qualified IT Cybersecurity Administrator to join our innovative IT team onsite at our Store Support Center in Nashville TN.Summary:The IT Cybersecurity Administrator is responsible for the implementation, maintenance, and enhancement of cybersecurity measures to protect the organization’s computer systems, networks, and data. This role involves monitoring for potential security breaches, responding to incidents, and ensuring compliance with security policies and regulations, including PCI DSS and HIPAA. The Cybersecurity Administrator works closely with other IT departments and our Managed Security Service Provider to ensure secure and smooth operations of technology solutions.Tri Star Energy has been recognized as one of Nashville’s top workplaces for the last 6 years in a row and is continuing to build out an amazing team of high-impact professionals. If you are looking for an opportunity to be a part of a team of talented IT professionals, increase your visibility and impact across an enterprise, and deepen your cross-functional tactical and strategic skill sets, we are the place for youPrimary Responsibilities:

• Maintain the daily relationship with the MSSP and ensure they are providing the contracted services and meeting all service level agreements.
• Configure and manage firewalls, VPNs, and other security infrastructure.
• Monitor security alerts and respond to security incidents. Investigate and mitigate cybersecurity threats, such as malware, ransomware, or phishing attempts.
• Develop, implement, and enforce security policies, procedures, and standards to ensure compliance with PCI DSS (Payment Card Industry Data Security Standard) and HIPAA (Health Insurance Portability and Accountability Act) regulations.
• Conduct regular reviews and updates of security policies to ensure alignment with industry best practices and regulatory changes.
• Ensure the organization adheres to PCI DSS requirements for handling and processing credit card information.
• Implement and maintain controls required by PCI DSS, such as encryption of cardholder data, network segmentation, and access control measures.
• Facilitate PCI DSS assessments and audits by working with internal teams and external assessors (QSA).
• Document and report on PCI DSS compliance status and remediation efforts.
• Ensure encryption and other protection measures are applied to sensitive data. Manage backups and disaster recovery protocols.
• Manage and control access rights for users and systems, ensuring the principle of least privilege.
• Conduct regular security audits, vulnerability scans, and penetration tests to identify weaknesses and develop remediation plans.
• Ensure that all systems and applications are up to date with security patches.
• Provide training for employees on best practices for cybersecurity, including training specific to PCI DSS and HIPAA compliance, to reduce human error risks.
• Work with other IT teams to design, implement, and maintain security systems. Report on security status, PCI DSS compliance, HIPAA compliance, and incidents to upper management.
• Ensure the BC/DR plans are continuously updated and execute on bi-annual testing of the plans. Remediate any issues that arise from the testing.
• Maintains confidentiality of all company, client, employee, and vendor information.
• Reacts productively to change.
• Performs other duties as assigned.

Required Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, Computer & Information Systems, or a related field.
• 3+ years of prior IT experience.
• 2+ years direct cybersecurity experience.
• Experience in PCI DSS compliance and regulations.
• Experience implementing controls and maintaining documentation for regulatory audits and assessments.
• Strong analytical and problem-solving skills to identify security threats and resolve them promptly.
• High level of accuracy in monitoring and implementing security protocols.
• Ability to communicate technical issues and solutions quickly, clearly, and accurately to non-technical stakeholders.
• Occasional on call availability.
• Or, any equivalent combination of education and experience in job-related activities.

Preferred Qualifications:

• Knowledge of regulatory frameworks and compliance standards (e.g., NIST, ISO 27001).
• Experience with cloud security (AWS, Azure, Google Cloud).
• Familiarity