Level II Technician / IT Compliance & Documentation

Custom Computer Specialists; Hauppauge (NY); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Medical and dental plans

Vision benefits

401K with employer match

Onsite fitness center

Paid holidays and vacation

Certification rewards program

Job summary

Custom Computer Specialists is seeking an IT Compliance & Documentation Specialist to write and maintain policies, plans, and procedures that keep clients secure and compliant. You will translate technical practice into clear documentation aligned with the NIST Cybersecurity Framework, supporting MFA rollouts and user audits.

The role requires 2+ years in IT/compliance, familiarity with IAM/MFA, and experience with MS 365 or Google Workspace.

Qualifications

• 2+ years in IT, IT compliance, security, or technical writing.
• Working knowledge of the NIST Cybersecurity Framework and common security controls.
• Experience writing policies, procedures, or technical documentation for non-technical readers.
• Familiarity with identity and access management, including MFA and user provisioning.
• Experience with Microsoft 365 and/or Google Workspace administration concepts.
• Strong organization skills and the ability to manage several documents and projects at once.

Responsibilities

• Write, maintain, and map core security and IT governance documents to the NIST CSF and related standards.
• Develop SOPs, runbooks, and user guides for technical staff.
• Define Acceptable Use Policies and disaster recovery planning documentation.
• Support incident response planning, MFA rollout, and access reviews.
• Keep documents organized, version-controlled, and audit-ready.

Skills

IT compliance

NIST CSF

Technical writing

MFA / IAM

MS 365 admin

G Suite admin

Tools

Microsoft 365 Admin

Google Workspace Admin

Job description

Level II Technician / IT Compliance & Documentation

We are a growing IT company; a great place to start and grow your career!

CCS is a leading technology consulting firm providing best in class solutions to our clients for over 45 years. Expressed simply in our tagline – Right People, Right Results, Right Careers! Our philosophy is, in fact, an obsession that drives our behavior, our culture and our work. It’s why we put tremendous emphasis on hiring individuals that embody the principles that align with our obsession. We continue to successfully provide network integration, support services, products solutions, and applications services to our valued clients in the northeast. Our focus is simple...our goal is to make technology easy and to help our clients use it as effectively as possible.

Custom Computer Specialists is looking for a motivated technical professional to join our team as an IT Compliance & Documentation Specialist who writes and maintains policies, plans, and procedures that keep our clients secure, compliant, and ready for the unexpected. You will turn technical practice into clear documentation aligned with the NIST Cybersecurity Framework, and help roll out the processes behind it, from multifactor authentication to user audits.

What You'll Do:

Documentation

Create, maintain, and review core security and IT governance documents, including:

• NIST documentation: map controls and practices to the NIST Cybersecurity Framework (and NIST SP 800-53 / 800-171 where required) and track gaps
• Protocol and process documentation: standard operating procedures, runbooks, and how-to guides for technical staff
• Acceptable Use Policies: define acceptable use of systems, networks, devices, and data
• Disaster recovery planning: backup, restoration, and business continuity plans with defined recovery time and recovery point objectives
• Incident Response Plan: roles, escalation paths, communication templates, and post-incident review steps
• Safety Plan: physical and digital safety procedures, coordinated with facilities and leadership
• Password Policies: complexity, rotation, storage, and password manager standards
• Chromebook Policies: device management, usage, assignment, repair, and return procedures
• Onboarding / Offboarding policies: account provisioning, access grants, equipment issue, and timely deprovisioning
• Software, user, and responsibility charts: build and maintain software inventories, user/role matrices, and RACI charts
• Multifactor deployment: plan, document, and support MFA rollouts, including user communication and training materials
• User auditing: run recurring access reviews, identify stale or excess permissions, and report findings
• Project management and scope definitions: write project scopes, track milestones, and coordinate with technical staff and stakeholders
• Perform other job-related duties as assigned

Ongoing

• Review and update documents on a set schedule, at least annually or after major changes
• Keep documentation organized, version-controlled, and easy to find
• Support audits, assessments, and compliance reviews with evidence and records

What success looks like:

• Coverage: share of required policies and plans that exist, are approved, and were reviewed in the last 12 months (target: 100%)
• MFA adoption: share of accounts with MFA enforced (target: 95%+, with documented exceptions)
• Audit timeliness: user access reviews finished on schedule, with stale accounts removed within 5 business days of being found
• Offboarding speed: access removed for departing users within 24 hours
• Project delivery: documented scopes finished on time and within scope
• Usability: staff and clients can find and follow the documents without needing to elevate

What You'll Bring:

• 2+ years in IT, IT compliance, security, or technical writing
• Working knowledge of the NIST Cybersecurity Framework and common security controls
• Experience writing policies, procedures, or technical documentation for non-technical readers
• Familiarity with identity and access management, including MFA and user provisioning
• Experience with Microsoft 365 and/or Google Workspace administration concepts
• Strong organization skills and the ability to manage several documents and projects at once

#IND

CCS Offers:

• Medical and dental plans
• Company paid vision and short and long term disability plans
• Flexible spending programs including Healthcare, Dependent Care, Transit and Parking
• 401K with employer match
• Onsite fitness center (or gym membership reimbursement for client or satellite based employees)
• Paid holidays and vacation
• Technical certification gift card rewards program

Come experience our unique culture and see how our “right people, right results” philosophy has led to our outstanding success! We are great place to start your IT career!

EEO Statement:

Custom Computer Specialists is an Affrimative Action and Equal Opportunity Employer.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. To request a reasonable accommodation to apply for this position or to enable qualified individuals with disabilities to perform essential job functions, contact [e-mail] or 631-864-6699.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Custom Computer Specialists’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.