Security Administrator

The Security Administrator is responsible for the day-to-day administration and continuous improvement of the information security control environment, with a primary focus on integrating information systems and security tools across on-premises and cloud environments. This role owns the recurring operational workload of the Information Security & Risk team, including identity and access governance, data protection, security awareness training, vulnerability and endpoint management, vendor/third-party risk assessment, and Shadow IT/AI governance.

• Implement, administer, and continuously improve integrations, automation, and workflows between security tools and enterprise systems to improve efficiency, visibility, and audit readiness.
• Support identity and access governance activities, including access reviews, least-privilege controls, password management, and external/vendor access administration.
• Support security risk management activities, including vendor assessments, technology reviews, audit readiness efforts, and data protection initiatives.
• Monitor vulnerability management, endpoint security, security awareness training, and operational security controls to help maintain a proactive security posture.
• Contribute to emerging security initiatives such as AI governance, Shadow IT management, and cloud security modernization efforts.
• Develop documentation, standards, and security processes that support consistency, scalability, and regulatory compliance across the organization.
• Collaborate cross-functionally to troubleshoot issues, implement improvements, and support ongoing security projects.

Any combination of education and experience providing the required skill and knowledge is qualifying:

• Bachelor’s degree in information security, IT, or related field, or equivalent experience.
• 3+ years in IT or information security administration, including at least 2 years in a security-focused role.
• Hands-on experience with Microsoft 365 security administration (Entra ID, Conditional Access, Purview, Defender) in a cloud or hybrid environment.
• Experience integrating systems and security tools using APIs, SSO, SCIM, and connectors; scripting or automation skills (PowerShell, Python, or low-code workflows).
• Working knowledge of NIST CSF, HIPAA, and/or ISO 27001, plus experience reviewing SOC2 evidence.
• Experience with vulnerability management, endpoint management, patching, and change management.
• Strong communication, documentation, and project management skills.

Preferred Qualifications:

• Security certifications such as Security+, SSCP, CySA+, SC-300, SC-401, or AZ-500.
• Experience with third-party risk management or GRC platforms.
• Familiarity with AI governance, Shadow IT/SaaS discovery, and AI risk frameworks.
• Knowledge of incident response, disaster recovery, and business continuity practices.
• Experience building security metrics and dashboards.
• Training and facilitation skills.

• Competitive total compensation package
• Medical, dental and vision insurance
• Retirement Savings program with generous company contribution
• Hybrid working model
• Health Savings Account with company contribution
• Wellness program
• Paid time off and personal days
• 9 paid holidays
• Paid Parental Leave
• And more!

More About CHA This pay range shown is a guideline. Min: $82,000 - $166,000 Compensation is based on factors such as qualifications, skill level, and competencies; compensation is based on the role’s location and is subject to change based on work location.

Diversity, Equity and Inclusion CHA is committed to advancing diversity, equity and inclusion within our organization, our membership, the care delivery of children’s hospitals and their communities and through the federal policymaking environment. With children’s hospitals we strive to ensure organizational cultures where everyone feels valued and actively participates in the mission of our organizations. Racism stands firmly in the way of improving children’s health. We remain vigilant in our quest for a diverse and inclusive community and in standing against racism and discrimination wherever it exists.

Join us in shaping a healthier future for kids. At Children’s Hospital Association, we unite more than 200 member hospitals to put children first-advancing care, informing policy, and driving progress together.

Where You’ll Work