Information Security Coordinator

Royal Electric Company provides electrical design, construction, and service, and is hiring an Information Security Coordinator to organize and maintain its security and compliance program. The role coordinates compliance tracking, audit evidence collection, security awareness and phishing simulation activities, vendor risk documentation, policy maintenance, security metrics, recurring security activities, and IT budget and asset tracking.

What you'll do:

• Maintain compliance tracking for NIST SP 800-171, CMMC Level 2, ISO 27001, and SOC 2, including control inventories, evidence libraries, and due dates
• Collect, organize, and prepare audit evidence, working with IT and business owners to meet deadlines
• Coordinate the security awareness training program: schedule training, track completion, follow up with non-completers, and report results
• Support phishing simulation campaigns by scheduling them, tracking results, and assigning follow-up training
• Manage vendor security questionnaires and track third-party risk documentation and renewal dates
• Maintain security policies and procedures, including version control, the annual review cycle, and employee acknowledgment tracking
• Track and report on security operations metrics such as patch compliance, backup verification results, and open remediation items, escalating overdue items to the responsible teams
• Schedule and document recurring security activities, including access reviews, tabletop exercises, and assessment follow-ups
• Take notes and track action items for security meetings and remediation projects
• Assist with IT budget and asset tracking for applications, licenses, hardware, and service contracts, including renewals, utilization, and spend against budget

What they're looking for:

• 1–2 years of experience in IT, compliance, audit, or an administrative role in a technical environment. Relevant coursework or an internship also counts
• Working knowledge of basic security concepts such as access control, patching, backups, and phishing
• Strong organizational skills and the ability to manage many deadlines at once
• Clear written communication, including the ability to follow up persistently and diplomatically across departments
• Proficiency with Microsoft 365, especially Excel, SharePoint, and Teams
• CompTIA Security+ or progress toward it
• Exposure to at least one compliance framework: NIST, CMMC, ISO 27001, or SOC 2
• Experience with a GRC platform, ticketing system, or security awareness platform such as KnowBe4
• Interest in utility or critical infrastructure environments

Benefits:

• Comprehensive wellness programs
• Continuous learning opportunities
• Health Care Plan (3 types of Medical plans, Discounted Dental & Orthodontist services for adults & children, Premium Vision Plan)
• Retirement Plan (Traditional 401k, Roth 401k)
• $50k Life Insurance (Basic, Voluntary, & AD&D)
• Paid Time Off (Vacation, Sick Leave, and 8 Paid Holidays)
• Family Leave FMLA (Maternity & Paternity)
• Short Term & Long-Term Disability
• Pet Insurance
• Flex Spending Accounts: Healthcare, Dependent care (Daycare children & elderly – work related), & Transit