Remote IT Compliance Engineer – Risk, Audits & Frameworks

INTEGRATED IT GROUP LLC; Twinsburg (OH); Hybrid; USD 95,000 - 130,000; Full time

Job summary

Integrated IT Group is seeking a Compliance Engineer to develop, implement, and maintain IT security policies ensuring alignment with regulations like CMMC, ISO 27001, NIST, and GDPR. The role involves audits, risk assessments, remediation, and training across client environments.

Most work can be performed remotely with occasional onsite visits; strong collaboration with cross-functional teams is required to protect sensitive data and ensure regulatory compliance.

Qualifications

• Bachelor’s degree in information technology or a related field.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication to stakeholders and for documentation.
• Solid organizational and project management skills to handle multiple initiatives and deadlines.
• Experience leading cross-functional projects in IT/compliance environments.
• Certifications such as CISA, CISM, or CISSP are a plus.

Responsibilities

• Develop and manage clients’ compliance frameworks, policies, and procedures aligned with security standards.
• Serve as the main point of contact for internal and external audits of IT systems.
• Conduct risk assessments and security control testing to identify gaps and vulnerabilities.
• Drive remediation efforts and recommended process improvements for compliance incidents.
• Develop and conduct training sessions on compliance frameworks for clients and teams.
• Maintain documentation and present reports on the status of the compliance program.
• Identify opportunities to automate compliance monitoring and testing.

Skills

IT compliance

Information security

Auditing

Risk assessment

Project management

Education

Bachelor’s degree in information technology or related field

Tools

CMMC

ISO 27001

NIST

SOC 2

HIPAA

GDPR

PCI-DSS

Job description

Integrated IT Group is seeking a Compliance Engineer to develop, implement, and maintain IT security policies ensuring alignment with regulations like CMMC, ISO 27001, NIST, and GDPR. The role involves audits, risk assessments, remediation, and training across client environments.

Most work can be performed remotely with occasional onsite visits; strong collaboration with cross-functional teams is required to protect sensitive data and ensure regulatory compliance.