Compliance Administrator

About TechR2
TechR2 is an industry leader in data security, Cyber Security Asset Management and data destruction solutions. We help organizations reduce data-breach risk while supporting sustainable, environmentally responsible practices.

Position Summary
The Compliance Officer owns TechR2’s compliance program. The role keeps the Company in line with customer contracts, laws, regulations, and the management system standards TechR2 is certified to.

The incumbent administers the integrated management system, plans and leads internal audits, runs risk assessments, and represents TechR2 during registrar and customer audits. The role reports to the CEO directly on compliance status, audit results, and risk.

Compliance Program Management

• Manage and enforce a compliance program aligned with customer contracts, agreements, and applicable laws and regulations.
• Review, update, and recommend company policies and procedures.
• Own document control for policies, procedures, manuals, forms, work instructions, and records.
• Track regulatory and industry developments and recommend program changes.
• Monitor work processes against production, quality, and customer-service standards; identify process improvements.

2. Management System Administration

• Administer TechR2’s ISO certifications and certification process.
• Implement and maintain the integrated management system for quality (ISO 9001), environmental (ISO 14001), occupational health and safety (ISO 45001), information security (ISO/IEC 27001), and supply chain integrity (ISO/IEC 20243).
• Maintain the management system for other industry certifications held by the Company.
• Serve as TechR2’s representative during surveillance, recertification, and other third-party audits.

3. Internal Audit

• Build and maintain an annual risk-based internal audit schedule.
• Plan and lead internal audits against ISO standards, NIST SP 800-171, HIPAA, and PCI DSS, and customer-requested audits.
• Perform SOC 2 readiness and control assessments in preparation for independent CPA examinations.
• Examine records, reports, operating practices, and documentation; test controls and detect discrepancies.
• Document audit work papers, findings, and memoranda.
• Track corrective actions to closure and verify their effectiveness.
• Coordinate with external auditors, customers, and regulators during assessments.

4. Risk Management

• Conduct risk assessments for cybersecurity, environmental, health and safety, and physical security, using ISO 31000 principles.
• Work with cross-functional teams to develop and carry out risk treatment plans.
• Recommend improvements to the internal control structure.

5. Reporting and Advisory

• Deliver regular and on-demand briefings to the VP of Operations, CEO.
• Prepare management reports summarizing compliance status, audit results, open findings, and risk trends.
• Recommend actions to improve compliance, operational efficiency, and control effectiveness.
• Maintain professional knowledge through training and continuing education.

QUALIFICATIONS

Education

• Bachelor’s degree in information systems, Cybersecurity, Accounting, Business Administration, Occupational Safety, or a related field; or an equivalent combination of education and experience.

Experience

• 5 or more years in compliance, internal audit, risk management, or management systems.
• At least 2 years administering or auditing ISO management systems.
• Experience hosting third-party certification or customer audits.
• Experience with information security frameworks (ISO/IEC 27001, NIST SP 800-171, SOC 2) strongly preferred.
• Experience in IT asset disposition, data destruction, electronics recycling, or a regulated service industry preferred.

Certifications

• Preferred: completion of an accredited ISO Lead Auditor course (ISO/IEC 27001 preferred; ISO 9001, 14001, or 45001 accepted) within 12 months of hire, if not already held.
• Preferred: CISA, CIA, CRISC, or CCEP.

Knowledge, Skills, and Abilities

• Working knowledge of ISO 19011 audit methods, ISO 31000 risk principles, and internal control concepts.
• Strong written and verbal communication, including executive briefings and audit reports.
• Highly organized and detail-oriented, with sound judgment and problem-solving skills.
• Able to work independently and manage multiple audits and deadlines.
• Able to build working relationships across departments while maintaining objectivity.
• Proficient with Microsoft 365 and document control systems.

PHYSICAL DEMANDS AND WORK ENVIRONMENT

• Work is primarily in an office setting, with regular walkthroughs of warehouse, processing, and data destruction areas during audits.
• Production areas involve moderate to high noise, moving equipment, and forklift traffic. Required PPE must be worn in those areas.
• Regularly sits and uses a computer for extended periods; stands and walks during facility audits.
• Occasionally lifts up to 25 lbs (records, sample equipment).
• Travel up to 10%, including occasional overnight travel to customer sites or audits.
• Occasional work outside normal hours during audit periods or incidents

TechR2 is an Equal Opportunity Employer. Qualified applicants and employees are considered without regard to race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, ancestry, age, disability, genetic information, military status, veteran status, or any other status protected by federal, state, or local law.

Pay: From $65,000.00 per year

Benefits:

• Dental insurance
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Referral program

Work Location: In person

Salary : $65,000