MSP Compliance Engineer

Eddy; Greer (SC); On-site; USD 72,000 - 88,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

PTO

Company Vehicle

Kitchen Snacks

Professional Development

Certification Support

Job summary

BrightFlow Technologies in Charlotte, NC, is seeking an experienced MSP Compliance Engineer to lead client engagements from gap assessment through remediation and ongoing maintenance.

The role requires hands-on experience with CMMC, NIST SP 800-171, HIPAA, and PCI DSS, ability to translate findings for non-technical stakeholders, and strong documentation habits. Travel to client sites may be required.

Qualifications

• 3–5 years of compliance experience.
• Hands-on experience with CMMC and NIST SP 800-171.
• Experience with HIPAA and PCI DSS.
• Ability to implement technical controls and explain them to non-technical decision-makers.

Responsibilities

• Own client compliance engagements end to end, from initial gap assessment through remediation, assessment readiness, and ongoing maintenance.
• Perform gap assessments against CMMC, NIST SP 800-171, HIPAA, and PCI DSS, and translate findings into clear, prioritized remediation plans.
• Implement technical controls directly, and direct and coordinate our engineering team on remediation work across client environments.
• Contribute to System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms) alongside internal and client stakeholders.
• Help develop and refine client security policies and procedures.

Skills

CMMC

NIST SP 800-171

HIPAA

PCI DSS

Documentation

Project management

Education

Bachelor's degree

Tools

PSA

Documentation Platform

Job description

MSP Compliance EngineerBrightFlow Technologies is a growing Managed Service Provider (MSP) based in Charlotte, NC. We support small and mid-sized businesses by delivering secure, stable, and well-architected IT environments, including organizations in the defense industrial base and healthcare that depend on us to meet strict regulatory requirements.We’re looking for an experienced MSP Compliance Engineer who has taken clients from complete non-compliance to full compliance and owned the process from start to finish. This is not an entry-level or “compliance-adjacent” role. We need someone with real, hands-on experience in CMMC, NIST SP 800-171, HIPAA, and PCI DSS who can assess a client’s environment, build the roadmap, implement controls, and keep them compliant long after the assessment is done.You’ll report directly to executive leadership and serve as the go-to compliance expert for both our clients and our internal team.Compensation$80,000 salaryResponsibilitiesOwn client compliance engagements end to end, from initial gap assessment through remediation, assessment readiness, and ongoing maintenancePerform gap assessments against CMMC, NIST SP 800-171, HIPAA, and PCI DSS, and translate findings into clear, prioritized remediation plansImplement technical controls directly, and direct and coordinate our engineering team on remediation work across client environmentsContribute to System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms) alongside internal and client stakeholdersHelp develop and refine client security policies and proceduresCollect, organize, and maintain evidence to support compliance claims and assessmentsSupport clients and third-party assessors during audits and C3PAO assessmentsLead client-facing meetings to review findings, explain requirements in plain language, and report on progressProvide ongoing compliance monitoring for clients after they reach compliance, so they stay compliant year over yearVisit client sites as needed for assessments, meetings, and remediation workMaintain accurate documentation in our PSA and our cloud-based IT documentation platformRequired Experience3–5 years of compliance experienceProven track record of taking organizations from non-compliance to full compliance with ownership of the entire processHands-on experience with CMMC and NIST SP 800-171Working experience with HIPAA and PCI DSSAbility to both implement technical controls and explain them to non-technical decision-makersExperience managing multiple client compliance projects at the same timeBachelor’s degreeU.S. citizenship requiredRequired CertificationsMust be active and unexpired:CMMC Registered Practitioner (RP)CompTIA Security+Nice to HaveMicrosoft GCC High experience (a huge plus)CMMC Certified CMMC Professional (CCP)CISSPCISAHCISPPPCI ISA or QSAExperience in medical or healthcare IT environmentsWhat We’re Looking ForSomeone who has actually done the work, not just studied the frameworksA self-starter who can own a compliance program without being managed step by stepSomeone equally comfortable in a client boardroom and in the technical details behind the scenesStrong attention to detail and disciplined documentation habitsA clear communicator who can make complex requirements understandableA commitment to staying current as CMMC, HIPAA, and PCI requirements evolveThis Role Is Likely Not a Fit IfYour compliance experience is limited to auditing or advising, with no hands-on implementationYou have only supported compliance for a single organization and not across multiple client environmentsYou haven’t owned a compliance engagement from gap assessment through to full complianceYou prefer to work fully remote or don’t want to travel to client sitesYou dislike documentation or evidence managementPerks & BenefitsHealth, dental, and vision insurance plus PTO (after 60 days)Company device and access to company vehiclesFully stocked kitchen with your favorite snacksCollaborative, professional team culture with real ownership and accountabilityOngoing training and professional development, including support for certificationsJoin UsAt BrightFlow Technologies, our Compliance Engineer is a key part of how we protect our clients and their businesses. You’ll have direct access to leadership, real ownership of the compliance practice, and a meaningful impact on organizations that depend on getting this right.If you’ve guided clients through the full compliance journey and want a role where your expertise is trusted, we’d love to talk.Apply today and build your next chapter with BrightFlow.E04JI802in73409ec33