MSP Compliance Engineer - CMMC & NIST/HIPAA Expert

Eddy; Greer (SC); Sur place; USD 72 000 - 88 000; Plein temps

Avantages offerts par ce poste

Health Insurance

Dental Insurance

Vision Insurance

PTO

Company Vehicle

Kitchen Snacks

Professional Development

Certification Support

Résumé du poste

BrightFlow Technologies in Charlotte, NC, is seeking an experienced MSP Compliance Engineer to lead client engagements from gap assessment through remediation and ongoing maintenance.

The role requires hands-on experience with CMMC, NIST SP 800-171, HIPAA, and PCI DSS, ability to translate findings for non-technical stakeholders, and strong documentation habits. Travel to client sites may be required.

Qualifications

• 3–5 years of compliance experience.
• Hands-on experience with CMMC and NIST SP 800-171.
• Experience with HIPAA and PCI DSS.
• Ability to implement technical controls and explain them to non-technical decision-makers.

Responsabilités

• Own client compliance engagements end to end, from initial gap assessment through remediation, assessment readiness, and ongoing maintenance.
• Perform gap assessments against CMMC, NIST SP 800-171, HIPAA, and PCI DSS, and translate findings into clear, prioritized remediation plans.
• Implement technical controls directly, and direct and coordinate our engineering team on remediation work across client environments.
• Contribute to System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms) alongside internal and client stakeholders.
• Help develop and refine client security policies and procedures.

Connaissances

CMMC

NIST SP 800-171

HIPAA

PCI DSS

Documentation

Project management

Formation

Bachelor's degree

Outils

PSA

Documentation Platform

Description du poste

BrightFlow Technologies in Charlotte, NC, is seeking an experienced MSP Compliance Engineer to lead client engagements from gap assessment through remediation and ongoing maintenance.

The role requires hands-on experience with CMMC, NIST SP 800-171, HIPAA, and PCI DSS, ability to translate findings for non-technical stakeholders, and strong documentation habits. Travel to client sites may be required.