Senior Compliance Administrator

Charles IT; Chesapeake (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life and Disability Insurance

401(k)

Performance-based bonuses

Training and development

Team-building events

Job summary

Charles IT in Chesapeake, VA is seeking a Sr. Compliance Administrator to develop, implement, and maintain policies ensuring regulatory compliance across frameworks such as SOC 2, NIST, HIPAA, and CMMC.

The role partners with clients and internal teams and serves as a point of contact for external auditors. You will manage policy assessments, gap analyses, risk reviews, and audits, coordinate with external auditors, and mentor junior staff while guiding remediation efforts and driving compliance

Qualifications

• Bachelor’s degree in IT, Compliance, Security, or related field (or equivalent experience).
• 5+ years of experience in compliance, auditing, or IT/security.
• Experience with GRC platforms, policy management, and audit processes.
• Strong knowledge of frameworks such as SOC 2, NIST, HIPAA, CMMC, and NYDFS.
• Ability to communicate effectively with both technical teams and executive stakeholders.
• Strong organizational and multitasking skills.
• Relevant certifications (CISA, CIPP, CCP, or similar) preferred.
• Self-starter with the ability to work independently.
• Valid U.S. driver’s license and ability to pass a background check.

Responsibilities

• Write, review, and maintain policies to meet regulatory requirements and align with current frameworks.
• Conduct policy assessments, identify gaps, and implement updates to address deficiencies.
• Facilitate policy reviews with clients and stakeholders for approval and adoption.
• Create and maintain internal SOPs; provide guidance to clients on SOP development and improvement.
• Set up and manage clients within GRC platforms, including applying and maintaining compliance baselines.
• Perform internal and third-party risk assessments.
• Create, assign, and track compliance tasks for clients and internal teams.
• Ensure client alignment with established compliance baselines.
• Conduct framework assessments (CCPA, CMMC, FINRA, HIPAA, NIST CSF 2.0, NYDFS, SOC 2, etc.).
• Identify compliance gaps, advise on remediation, and drive remediation efforts to completion.
• Manage audit preparation, including evidence collection and review.
• Coordinate with external auditors and respond to follow-up requests and DDQs.
• Manage projects, ensuring tasks, milestones, and deliverables are completed on time.
• Communicate progress through GRC platforms and internal systems.
• Design and facilitate tabletop exercises; track and manage follow-up actions.
• Build and maintain client relationships; contribute to meeting agendas and compliance roadmaps.
• Provide ongoing guidance on compliance requirements and best practices.
• Support team operations by handling escalations and mentoring junior team members.
• Other duties as assigned.

Skills

Compliance

Auditing

IT Security

Regulatory knowledge

Education

Bachelor’s degree in IT, Compliance, Security, or related field

Job description

Exceptional Service, Endless Improvement, PassionatePeople, andHonest and Forthright.Guided by our values, we foster a culture of growth, balance, and belonging where every team member can thrive.

The Sr. Compliance Administrator is responsible for managing assessments to help develop, implement, and maintain policies and procedures to ensure organizational compliance with regulatory frameworks. This role involves facilitating project tasks with clients, internal teams, and being a point of contact for external auditors to manage compliance activities, conduct assessments, and provide technical guidance. The Sr. Compliance Administrator works under the guidance of the Managed Compliance Supervisor and senior members of the Compliance Team.

Responsibilities:

• Write, review, and maintain policies to meet regulatory requirements and align with current frameworks
• Conduct policy assessments, identify gaps, and implement updates to address deficiencies
• Facilitate policy reviews with clients and stakeholders for approval and adoption
• Create and maintain internal SOPs; provide guidance to clients on SOP development and improvement
• Set up and manage clients within GRC platforms, including applying and maintaining compliance baselines
• Perform internal and third-party risk assessments
• Create, assign, and track compliance tasks for clients and internal teams
• Ensure client alignment with established compliance baselines
• Conduct framework assessments (CCPA, CMMC, FINRA, HIPAA, NIST CSF 2.0, NYDFS, SOC 2, etc.)
• Identify compliance gaps, advise on remediation, and drive remediation efforts to completion
• Manage audit preparation, including evidence collection and review
• Coordinate with external auditors and respond to follow-up requests and DDQs
• Manage projects, ensuring tasks, milestones, and deliverables are completed on time
• Communicate progress through GRC platforms and internal systems
• Design and facilitate tabletop exercises; track and manage follow-up actions
• Build and maintain client relationships; contribute to meeting agendas and compliance roadmaps
• Provide ongoing guidance on compliance requirements and best practices
• Support team operations by handling escalations and mentoring junior team members
• Other duties as assigned

• Bachelor’s degree in IT, Compliance, Security, or related field (or equivalent experience)
• 5+ years of experience in compliance, auditing, or IT/security
• Experience with GRC platforms, policy management, and audit processes
• Strong knowledge of frameworks such as SOC 2, NIST, HIPAA, CMMC, and NYDFS
• Ability to communicate effectively with both technical teams and executive stakeholders
• Strong organizational and multitasking skills
• Relevant certifications (CISA, CIPP, CCP, or similar) preferred
• Self-starter with the ability to work independently
• Valid U.S. driver’s license and ability to pass a background check

Charles IT offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance, paid holidays, PTO, 401(k), and performance-based bonuses. Team members also enjoy ongoing training, professional development, quarterly team-building events, and a collaborative workplace culture.

Commitment to Inclusion:

Charles IT is an equal opportunity employer committed to fostering an inclusive and respectful work environment. We welcome diverse backgrounds and perspectives and do not discriminate based on any protected characteristic.

The information contained in this job description is for compliance with the American with Disabilities Act (A.D.A.) and is not an exhaustive list of the duties performed for this position. Additional duties may be required.