IT Compliance Engineer hybrid

INTEGRATED IT GROUP LLC; Twinsburg (OH); Hybrid; USD 95,000 - 130,000; Full time

Job summary

Integrated IT Group is seeking a Compliance Engineer to develop, implement, and maintain IT security policies ensuring alignment with regulations like CMMC, ISO 27001, NIST, and GDPR. The role involves audits, risk assessments, remediation, and training across client environments.

Most work can be performed remotely with occasional onsite visits; strong collaboration with cross-functional teams is required to protect sensitive data and ensure regulatory compliance.

Qualifications

• Bachelor’s degree in information technology or a related field.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication to stakeholders and for documentation.
• Solid organizational and project management skills to handle multiple initiatives and deadlines.
• Experience leading cross-functional projects in IT/compliance environments.
• Certifications such as CISA, CISM, or CISSP are a plus.

Responsibilities

• Develop and manage clients’ compliance frameworks, policies, and procedures aligned with security standards.
• Serve as the main point of contact for internal and external audits of IT systems.
• Conduct risk assessments and security control testing to identify gaps and vulnerabilities.
• Drive remediation efforts and recommended process improvements for compliance incidents.
• Develop and conduct training sessions on compliance frameworks for clients and teams.
• Maintain documentation and present reports on the status of the compliance program.
• Identify opportunities to automate compliance monitoring and testing.

Skills

IT compliance

Information security

Auditing

Risk assessment

Project management

Education

Bachelor’s degree in information technology or related field

Tools

CMMC

ISO 27001

NIST

SOC 2

HIPAA

GDPR

PCI-DSS

Job description

Job Description

Job Description

Job Description

The responsibilities of a Compliance Engineer include but are not limited to developing, implementing, and maintaining IT security policies and procedures to ensure our clients’ systems align with legal requirements, industry regulations, and internal controls. Collaboration with other internal departments is integral to conduct audits, assess risks, and drive remediation efforts to protect sensitive data and prevent violations. While most of the work can be performed remotely, occasional onsite service for clients may be required.

Essential Functions

• Develop and manage clients’ compliance frameworks, policies, and procedures, ensuring they are aligned with security best practices and regulatory standards like CMMC, GDPR, SOC 2, ISO 27001, and NIST
• Serve as the main point of contact for internal and external audits related to IT systems and compliance
• Conduct regular risk assessments and security control testing for clients to identify potential compliance gaps, risks, and vulnerabilities within the IT infrastructure
• Drive efforts to address any compliance-related incidents, vulnerabilities, or audit findings, recommending corrective actions and process improvements
• Develop and conduct training sessions to educate clients and mentor internal teams on compliance frameworks and best practices
• Maintain accurate documentation of compliance activities, testing results, and policies, preparing and presenting reports to management on the status of the compliance program
• Identify opportunities to automate compliance monitoring and testing to improve efficiency and consistency
• Suggest and implement ongoing framework development of compliance initiatives

Qualifications

• Bachelor’s degree in information technology or a related field is preferred
• Exceptional analytical and problem-solving skills to identify and address complex issues
• Excellent verbal and written communication skills to effectively communicate with stakeholders, write technical documentation, and explain compliance protocols
• Strong organizational and project management skills to handle multiple initiatives and meet deadlines
• Proven success leading projects in a cross-functional work environment
• Required skills:
  • 3+ years of experience in IT compliance, information security, or internal auditing
  • Strong understanding of network security, identity and access management, and data protection principles
  • In-depth knowledge of relevant compliance frameworks including CMMC, ISO 27001, NIST, SOC 2, HIPAA, GDPR, and PCI-DSS
  • Experience in conducting IT audits, performing risk assessments, and managing the audit and remediation process
  • Exceptional analytical and problem-solving skills to identify and address complex compliance issues
  • Excellent verbal and written communication skills to effectively communicate with stakeholders, write technical documentation, and explain compliance protocols
  • Strong organizational and project management skills to handle multiple compliance initiatives and meet deadlines
  • Preferred certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or CISSP

Company Description

Integrated IT Group is a comprehensive provider of managed, shared, and stand-alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets.

Company Description

Integrated IT Group is a comprehensive provider of managed, shared, and stand-alone services for clients throughout Northeast Ohio. These services include managed IT support, cloud solutions, cybersecurity, network solutions, IT consulting, mobile solutions, and disaster recovery for companies in commercial and public sector markets.