Remote IT & Cybersecurity Compliance Lead

Openkrill; United States; Remote; USD 110,000 - 180,000; Full time

Benefits offered by this job

Remote Work

Competitive Benefits

Flexible PTO

Job summary

Pearl is seeking an experienced IT & Cybersecurity Compliance Specialist to manage our IT infrastructure and lead cybersecurity and privacy compliance for a SaaS medical device environment. The role blends hands-on IT administration with program ownership to ensure secure, well-maintained systems aligned with SOC 2, HIPAA, and GDPR.

The ideal candidate will implement SOPs, monitor security KPIs, conduct audits, and collaborate with vendors to maintain program maturity in a fast-growing company.

Qualifications

• 3+ years of IT administration, systems management, or a combined IT/security role.
• 3+ years of experience implementing and maintaining SOC 2 certification.
• 3+ years of experience with HIPAA, GDPR, and other global privacy frameworks.
• Proven track record of managing compliance programs, including audits, risk assessments, and CAPAs.
• Hands-on experience with compliance tools such as Vanta or similar platforms.
• Demonstrated experience with endpoint management, IAM platforms, MDM solutions, and SaaS administration.
• Strong understanding of cybersecurity best practices, incident response, and supplier risk management.
• Excellent written and verbal communication skills, with the ability to translate complex requirements into actionable processes.
• Ability to work independently and collaboratively in a fast-paced environment.
• Relevant certifications (e.g., CISA, CISM, CISSP, CompTIA Security+, or equivalent) are a plus.

Responsibilities

• Administer and maintain IT systems including endpoint management, IAM, and SaaS tooling.
• Manage onboarding and offboarding processes including provisioning and deprovisioning of accounts, hardware, and system access.
• Maintain and enforce IT access controls, role-based permissions, and the principle of least privilege across all systems.
• Serve as the first point of escalation for internal IT support requests and tickets, triaging and resolving technical issues.
• Manage and maintain the company’s device fleet, including MDM enrollment, patching, and compliance monitoring.
• Administer and monitor cloud infrastructure and SaaS platform configurations for security and availability.
• Maintain IT asset inventory and manage software licensing.
• Conduct gap assessments to evaluate compliance with security and privacy regulations (SOC 2, HIPAA, GDPR).
• Develop, write, and revise SOPs for security and privacy programs.
• Implement and monitor security-related KPIs to measure and improve compliance performance.
• Assess, document, and report security breaches or incidents, ensuring timely and accurate communication.
• Perform security assessments of all new and existing suppliers, including annual reviews.
• Conduct Information Security incident reviews and recommend corrective actions.
• Manage Corrective and Preventive Actions (CAPAs) related to security and privacy.
• Prepare for and manage security and privacy audits, ensuring readiness and compliance.
• Complete security questionnaires for clients, vendors, and partners.
• Stay current on evolving security and privacy regulations and recommend updates to policies and procedures as needed.

Skills

SOC 2 Compliance

HIPAA Compliance

GDPR Compliance

IAM

MDM

SaaS Administration

Incident Response

Vendor Risk Management

Security Awareness

Education

CISA Certification

CISM Certification

CISSP Certification

CompTIA Security+

Tools

Vanta

Google Workspace

GRC Tools

Job description

Pearl is seeking an experienced IT & Cybersecurity Compliance Specialist to manage our IT infrastructure and lead cybersecurity and privacy compliance for a SaaS medical device environment. The role blends hands-on IT administration with program ownership to ensure secure, well-maintained systems aligned with SOC 2, HIPAA, and GDPR.

The ideal candidate will implement SOPs, monitor security KPIs, conduct audits, and collaborate with vendors to maintain program maturity in a fast-growing company.