What are the responsibilities and job description for the Senior Compliance Administrator position at Data-Mail, Inc?
Work Location: Newington, CT. This is an in person role, not remote, not hybrid
Summary
The Senior Compliance Administrator is responsible for owning and managing the company’s security and compliance processes end-to-end, including audit coordination, certification readiness, and execution of compliance-related initiatives.
This role serves as the central point of accountability for audit calendars, evidence collection, remediation tracking, and internal coordination across security and technology teams. The position ensures that all audit and compliance activities—such as SOC 2, PCI, and client assessments—are executed in a timely, organized, and consistent manner.
The Senior Compliance Administrator works closely with IT, operational teams, and external auditors to maintain readiness, drive completion of required activities, and ensure visibility into compliance status across the organization.
Key Responsibilities
Audit & Compliance Ownership
- Own and manage the full lifecycle of all audit and certification activities (SOC 2, PCI, client-driven audits)
- Develop and maintain the enterprise audit calendar, ensuring all milestones and deadlines are clearly defined and met
- Act as the primary coordinator and point of contact for internal teams and external auditors
- Manage the collection, organization, and submission of audit evidence
- Track and drive remediation of audit findings through to completion
Program Management & Execution
- Serve as the operational owner of the company’s compliance program, ensuring consistent execution of policies and controls
- Coordinate and track all compliance-related initiatives across IT systems, infrastructure, and business processes
- Maintain documentation for policies, procedures, and control evidence to support audit readiness
- Ensure standardized processes and repeatability across audit cycles
- Continually develop, modernize and perform company security awareness training and ongoing company visibility into new threat vectors.
- Coordinate and execute penetration testing, phishing testing, and communicate results with ideas on improving the metrics.
Patch & Security Initiative Coordination
- Coordinate system patching cycles and security-related updates across internal technology teams
- Track vulnerability remediation efforts, ensuring timely completion and proper documentation
- Manage project timelines and dependencies for security-related initiatives
- Provide visibility into status, risks, and delays associated with patching and compliance efforts
Risk Management Support
- Lead the efforts for ongoing SIEM management. Monitor alerts, finetune and add new data points for constantly increased awareness.
Reporting & Metrics
- Develop and maintain dashboards and reporting on audit readiness, remediation status, and compliance progress
- Provide regular updates to management on upcoming audits, risks, and key milestones
- Track and report on key operational metrics related to compliance and security execution
Cross-Functional Coordination
- Lead monthly Security Committee meetings with key stakeholders across the enterprise.
- Coordinate testing efforts such as disaster recovery and business continuity exercises
- Support organization-wide security awareness and training coordination as needed
Skills & Qualifications
- Bachelor’s degree in Information Technology, Cybersecurity, Business, or related field (or equivalent experience)
- 4–7 years of experience in IT, audit coordination, compliance, or project/program management with a security focus
- Experience supporting or managing audits such as SOC 2, PCI, or similar frameworks
- Experience with Splunk, TenableSC, or other similar frameworks for alerting and vulnerability remediation
- Strong project management and organizational skills with the ability to manage multiple deadlines
- Experience coordinating cross-functional teams and driving tasks to completion
- Expertise with security concepts such as access control, patching, vulnerability management, and risk tracking
- Strong documentation and communication skills (written and verbal)
- Experience with reporting tools (Excel, Power BI, or similar) and task management platforms
- Relevant certifications (e.g., CISA, CISSP, CRISC, Security , or similar) are a plus