IT Compliance Engineer

Integrated IT Group is a comprehensive provider of managed, shared, and stand-alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets.

Job Description

The responsibilities of a Compliance Engineer include but are not limited to developing, implementing, and maintaining IT security policies and procedures to ensure our clients’ systems align with legal requirements, industry regulations, and internal controls. Collaboration with other internal departments is integral to conduct audits, assess risks, and drive remediation efforts to protect sensitive data and prevent violations. While most of the work can be performed remotely, occasional onsite service for clients may be required.

Essential Functions

• Develop and manage clients’ compliance frameworks, policies, and procedures, ensuring they are aligned with security best practices and regulatory standards like CMMC, GDPR, SOC 2, ISO 27001, and NIST
• Serve as the main point of contact for internal and external audits related to IT systems and compliance
• Conduct regular risk assessments and security control testing for clients to identify potential compliance gaps, risks, and vulnerabilities within the IT infrastructure
• Drive efforts to address any compliance-related incidents, vulnerabilities, or audit findings, recommending corrective actions and process improvements
• Develop and conduct training sessions to educate clients and mentor internal teams on compliance frameworks and best practices
• Maintain accurate documentation of compliance activities, testing results, and policies, preparing and presenting reports to management on the status of the compliance program
• Identify opportunities to automate compliance monitoring and testing to improve efficiency and consistency
• Suggest and implement ongoing framework development of compliance initiatives

Qualifications

• Bachelor’s degree in information technology or a related field is preferred
• Exceptional analytical and problem-solving skills to identify and address complex issues
• Excellent verbal and written communication skills to effectively communicate with stakeholders, write technical documentation, and explain compliance protocols
• Strong organizational and project management skills to handle multiple initiatives and meet deadlines
• Proven success leading projects in a cross-functional work environment
• Required skills:
• 3 years of experience in IT compliance, information security, or internal auditing
• Strong understanding of network security, identity and access management, and data protection principles
• In-depth knowledge of relevant compliance frameworks including CMMC, ISO 27001, NIST, SOC 2, HIPAA, GDPR, and PCI-DSS
• Experience in conducting IT audits, performing risk assessments, and managing the audit and remediation process
• Exceptional analytical and problem-solving skills to identify and address complex compliance issues
• Excellent verbal and written communication skills to effectively communicate with stakeholders, write technical documentation, and explain compliance protocols
• Strong organizational and project management skills to handle multiple compliance initiatives and meet deadlines
• Preferred certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or CISSP

Integrated IT Group is an equal opportunity employer and does not discriminate in hiring or employment, in accordance with the requirements of all applicable laws, including race, color, religion, national origin, ancestry, age, gender, marital status, military status, sexual orientation, disability, or medical condition.

Benefits

• 401(k) matching
• Health insurance
• Dental insurance
• Vision insurance
• Paid time off
• Professional development assistance
• Paid life insurance