Remote IT & Cybersecurity Compliance Specialist

Pearl; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Remote work

Flexible PTO

Ongoing training

Competitive benefits

Job summary

Pearl is seeking an experienced IT & Cybersecurity Compliance Specialist to manage IT infrastructure and lead privacy and security compliance in a SaaS medical device environment. You will own SOC 2, HIPAA, and GDPR programs, write SOPs, run audits, and drive security training, incident response, and supplier risk across a fast-growing remote-first team.

Responsibilities include IT administration, onboarding/offboarding, access control, device management, cloud configurations, asset inventory,

Qualifications

• 3+ years IT administration, systems management, or IT/security role.
• 3+ years implementing and maintaining SOC 2 certification.
• 3+ years experience with HIPAA, GDPR, and other privacy frameworks.
• Proven track record managing compliance programs, audits, risk assessments, CAPAs.
• Hands‑on experience with compliance tools such as Vanta or similar platforms.
• Experience with endpoint management, IAM, MDM, and SaaS administration.
• Strong understanding of cybersecurity best practices, incident response, and supplier risk management.
• Excellent written and verbal communication, translating complex requirements into actionable processes.
• Ability to work independently and collaboratively in a fast‑paced environment.
• Certs like CISA/CISM/CISSP or equivalent are a plus.

Responsibilities

• IT Infrastructure & Systems Administration – manage core IT systems and SaaS tooling.
• Onboarding/offboarding provisioning and deprovisioning of accounts and devices.
• Enforce access controls and least privilege across systems.
• Escalation point for internal IT support and ticket triage.
• Manage device fleet, MDM enrollment, patching, and compliance.
• Administer cloud infrastructure and SaaS configurations for security/availability.
• Maintain IT asset inventory and software licensing.
• Conduct gap assessments for SOC 2, HIPAA, GDPR compliance.
• Develop and revise SOPs for security and privacy programs.
• Implement security KPIs to measure compliance performance.
• Document and report security breaches or incidents; coordinate response.
• Perform supplier security assessments and annual reviews.
• Manage CAPAs for security/privacy and audits readiness.
• Prepare for audits; complete security questionnaires for clients/partners.
• Stay current on evolving regulations and update policies accordingly.
• Administer Vanta or equivalent GRC tool; oversee security training programs.
• Design phishing simulations and related training; run security committee meetings.

Skills

SOC 2

HIPAA

GDPR

IT administration

IAM

MDM

SaaS administration

SOPs

Audits

CAPAs

Phishing training

GRC tooling

Vanta

Security training

Vendor risk

Google Workspace

Education

CISA

CISM

CISSP

CompTIA Security+

ISO 27001

Tools

Vanta

Google Workspace

Slack

Notion

MDM

Job description

Pearl is seeking an experienced IT & Cybersecurity Compliance Specialist to manage IT infrastructure and lead privacy and security compliance in a SaaS medical device environment. You will own SOC 2, HIPAA, and GDPR programs, write SOPs, run audits, and drive security training, incident response, and supplier risk across a fast-growing remote-first team.

Responsibilities include IT administration, onboarding/offboarding, access control, device management, cloud configurations, asset inventory,