MSP Compliance Engineer — End-to-End Security & Audits

BrightFlow Technologies; Greer (SC); On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Health, dental, and vision insurance +

PTO after 60 days

Company vehicle access

Fully stocked kitchen

Ownership and accountability culture

Certification training support

Job summary

BrightFlow Technologies seeks an experienced Compliance Engineer to own client compliance programs end to end, from gap assessment to remediation and ongoing monitoring. You will lead cross-functional teams, perform assessments against CMMC, NIST SP 800-171, HIPAA, and PCI DSS, and translate findings into actionable remediation plans.

The role requires hands-on implementation and strong documentation practices.

Qualifications

• 3–5 years of compliance experience.
• Proven track record of taking organizations from non-compliance to full compliance with ownership of the entire process.
• Hands-on experience with CMMC and NIST SP 800-171.
• Working experience with HIPAA and PCI DSS.
• Ability to implement technical controls and explain them to non-technical decision-makers.
• Experience managing multiple client compliance projects at the same time.
• Bachelor’s degree.
• U.S. citizenship required.

Responsibilities

• Own client compliance engagements end to end, from initial gap assessment through remediation, assessment readiness, and ongoing maintenance.
• Perform gap assessments against CMMC, NIST SP 800-171, HIPAA, and PCI DSS, and translate findings into clear, prioritized remediation plans.
• Implement technical controls directly, and direct and coordinate our engineering team on remediation work across client environments.
• Contribute to System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms) alongside internal and client stakeholders.
• Help develop and refine client security policies and procedures.
• Collect, organize, and maintain evidence to support compliance claims and assessments.
• Support clients and third-party assessors during audits and C3PAO assessments.
• Lead client-facing meetings to review findings, explain requirements in plain language, and report on progress.
• Provide ongoing compliance monitoring for clients after they reach compliance, so they stay compliant year over year.
• Visit client sites as needed for assessments, meetings, and remediation work.
• Maintain accurate documentation in our PSA and our cloud-based IT documentation platform.

Education

Bachelor's degree

Tools

CMMC RP

CompTIA Security+

Job description

BrightFlow Technologies seeks an experienced Compliance Engineer to own client compliance programs end to end, from gap assessment to remediation and ongoing monitoring. You will lead cross-functional teams, perform assessments against CMMC, NIST SP 800-171, HIPAA, and PCI DSS, and translate findings into actionable remediation plans.

The role requires hands-on implementation and strong documentation practices.