Location: Hays Office

Job Summary (Overall Purpose of the Position)

The purpose of the IT Security Administrator is to design, implement, maintain, and monitor the IT security program to protect Midwest Energy’s data, devices and computer networks from cyber-attacks and help set and maintain security standards. The position ensures that computer systems, data systems, software solutions, servers and networks are monitored for security issues and that protective security software is installed and operating as designed. The position will work to act against cyber-attacks and document events, incidents, or breaches. The IT Security Administrator will collaborate with all members of the IT department in implementing security solutions, policies, and procedures.

Job Duties - Responsibilities – Tasks

Corporate Security

1. Research current industry cybersecurity best practices. Develop a strategy and lead the implementation of the best cybersecurity practice standards accordingly.
2. Prepare and report security metrics (KPIs) at defined intervals based on the adopted cybersecurity framework (CSC 18, NIST, SANS, etc.) and identified baselines.
3. Implement and facilitate a cyber security awareness user training program for all employees. Define, develop and present performance metrics associated to the training to report the progress and performance of the company.
4. Monitor computer networks and devices for security issues and compliance with defined security standards including but not limited to missing and installed patches, hardened baselines, hardened software configurations, and known vulnerability mitigations.
5. Defend systems against unauthorized access.
6. Either directly or by working in conjunction with IT Department members, install cybersecurity measures by configuring, supporting, and operating software and solutions to protect systems, corporate software and information infrastructure, including firewalls and antivirus/antimalware and IDS/IPS software.
7. Alert Midwest Energy employees when a new dangerous threat is identified by the cybersecurity community that cannot be mitigated through technology.
8. Perform active Threat hunting, looking for indicators of threats and indicators of compromise.
9. Perform network vulnerability assessments through periodic visits (as prescribed by the V.P. Information Technology) to the Kansas Intelligence Fusion Center and communicate assessment results with the V.P. Information Technology.
10. Perform internal vulnerability assessments and plan a strategy for remediation.
11. Review and update the Corporate Cybersecurity Incident Response (IR) Plan and associated IR Playbooks defining the process used to investigate security breaches and other cyber security incidents.
12. Document security breaches and assess the damage caused as laid out in the Corporate Cybersecurity Incident Response Plan.
13. Organize and execute an annual penetration test with an outside firm. Work with the other members of the IT Dept. to remediate any weakness.
14. Assist in the purchase of cybersecurity related IT hardware and software.
15. As Midwest Energy is required by the North American Electric Reliability Corp. (NERC) and the relevant Reliability Entity to adhere to internal standards, procedures, and maintenance practices related to Critical Infrastructure Protection (CIP), the Corporate Network and Corporate Data Center infrastructure might, on occasion, be impacted by these compliance standards. This position will assist in the compliance measures as they relate to the Corporate Network and Corporate Data Center infrastructure.

Leadership

1. Lead and champion the implementation of the corporate defined security program set forth by the Center for Internet Security (CIS) and defined as the 18 Critical Security Controls (CSC 18) or any other adopted security framework such as NIST, SANS, etc.
2. Act as the Incident Response (IR) Coordinator as defined by the Corporate Cybersecurity Incident Response Plan. Coordinate the mitigation and remediation of detected vulnerabilities with the cooperation of applicable IT Department team members to maintain a high security standard.
3. Coordinate and/or lead tabletop exercises to test the Incidence Response plan and associated IR Playbooks. Revise the IR plan and IR Playbooks if necessary and review with the team.
4. Lead and champion the Technology Roadmap initiatives assigned to the Datacenter Engineers. Act as a project lead, core team member and/or subject matter expert as assigned. Assist in the evaluation and definition of new Technology Roadmap initiatives.
5. Actively participate in the “Leadership 40” meetings. Periodically present to the Board of Directors, Executive Staff, Leadership 40 and the employee base at large regarding IT security affairs.
6. Research, prepare, and present enhancements to Administrative Policies, IT Department Policies and departmental procedures to support the implementation and ongoing adherence to the adopted ITIL standards and cybersecurity framework.
7. Ensure Corporate IT security procedures are adhered to and accurately documented.
8. Maintain costs and forecast budgets relating to the corporate security program.

General

1. Develop and maintain internal and external working relationships for maximum effectiveness in serving Midwest Energy customers and communities. Ensure communication and exchange of information to present a positive corporate image, both internally and externally. Keep management informed of issues that might impact the work environment.
2. Coordinate and provide direction in conjunction with key entities for effective outcomes.
3. Keep informed of changes concerning IT security trends, technology trends and security standards through trade magazines, conference participation and webinars. Keep informed of current IT threats such as malware, ransomware, phishing tests, smishing, etc.
4. Promote safe working habits and enforce all safety rules and regulations of Midwest Energy, Inc. Lead by example in safety compliance and take corrective action on safety violations, defective equipment, and any other practice that may adversely affect a safe working environment.

Education and Experience

1. Bachelor’s degree in cyber security, information systems, computer science, data processing or a related technical field of study. Alternatively work experience and/or a combination of education and work experience will be accepted. Master's Degree is preferred.
2. Preferred certification and/or minimum 10 years’ experience working with
   1. CompTIA Security+
   2. Cisco Certified Network Associate
   3. Cisco Certified Network Professional
   4. TCP/IP and OSI network models
   5. Security operations
   6. Network administration
   7. Windows Server operating systems
   8. VMware products
   9. Microsoft Azure
   10. Linux Server operating systems
   11. Windows Power Shell and Linux bash scripting
   12. Cloud environment security
3. Must be able to pass a FBI or Department of Homeland Security background check in order to participate in the Kansas Intelligence Fusion Center program.
4. Knowledge of electric or gas utility industry is preferred.

Key Competencies

1. Ability to manage and supervise others in a team environment to facilitate the completion of Technology Roadmap initiatives and the advancement of the IT security program.
2. Exhibits professionalism and integrity by maintaining composure in challenging situations, demonstrating accountability, and upholding confidentiality and ethical standards.
3. Demonstrate proper and respectful communication etiquette and proficiency in verbal and written communication to correspond with the user community, cross-functional team members, managers, vendors and consultants. Demonstrate proficiency in grammar, punctuation, and style to ensure all written content is professional and polished.
4. Ability to build trust through accountability, collaboration, promoting a culture of leadership, and mutual respect, while maintaining uncompromising integrity.
5. Skilled in organizing, planning, and directing multiple processes and activities.
6. Ability to prioritize and execute multiple issues simultaneously.
7. Demonstrate skills utilizing project management techniques and methodologies.
8. Demonstrated ability to provide quality customer service and establish effective working relationships with end-users, consultants, vendors, contractors and other utility companies.
9. Demonstrated analytical skills and proper troubleshooting techniques to efficiently resolve issues.
10. General knowledge and understanding of IT acumen associated to best practice ITIL standards including Change Control and IT Service Desk.
11. General knowledge and understanding of IT acumen associated to Networking, Telecommunications, PC Support and Database Administration.
12. Demonstrate detection and analytical skills. Demonstrate skills utilizing technology platforms and reporting tools including Linux and Windows.
13. Ability to quickly and accurately find a solution to security breaches.
14. Ability to acquire, within a reasonable time, an understanding of basic utility operations.
15. Ability to organize and lead end-user training.
16. Must hold and maintain a valid Kansas Driver’s License.

Posting Close Date: September 9, 2025

Equal Opportunity Employer