Senior Compliance Lead & Policy Architect

Charles IT; Chesapeake (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life and Disability Insurance

401(k)

Performance-based bonuses

Training and development

Team-building events

Job summary

Charles IT in Chesapeake, VA is seeking a Sr. Compliance Administrator to develop, implement, and maintain policies ensuring regulatory compliance across frameworks such as SOC 2, NIST, HIPAA, and CMMC.

The role partners with clients and internal teams and serves as a point of contact for external auditors. You will manage policy assessments, gap analyses, risk reviews, and audits, coordinate with external auditors, and mentor junior staff while guiding remediation efforts and driving compliance

Qualifications

• Bachelor’s degree in IT, Compliance, Security, or related field (or equivalent experience).
• 5+ years of experience in compliance, auditing, or IT/security.
• Experience with GRC platforms, policy management, and audit processes.
• Strong knowledge of frameworks such as SOC 2, NIST, HIPAA, CMMC, and NYDFS.
• Ability to communicate effectively with both technical teams and executive stakeholders.
• Strong organizational and multitasking skills.
• Relevant certifications (CISA, CIPP, CCP, or similar) preferred.
• Self-starter with the ability to work independently.
• Valid U.S. driver’s license and ability to pass a background check.

Responsibilities

• Write, review, and maintain policies to meet regulatory requirements and align with current frameworks.
• Conduct policy assessments, identify gaps, and implement updates to address deficiencies.
• Facilitate policy reviews with clients and stakeholders for approval and adoption.
• Create and maintain internal SOPs; provide guidance to clients on SOP development and improvement.
• Set up and manage clients within GRC platforms, including applying and maintaining compliance baselines.
• Perform internal and third-party risk assessments.
• Create, assign, and track compliance tasks for clients and internal teams.
• Ensure client alignment with established compliance baselines.
• Conduct framework assessments (CCPA, CMMC, FINRA, HIPAA, NIST CSF 2.0, NYDFS, SOC 2, etc.).
• Identify compliance gaps, advise on remediation, and drive remediation efforts to completion.
• Manage audit preparation, including evidence collection and review.
• Coordinate with external auditors and respond to follow-up requests and DDQs.
• Manage projects, ensuring tasks, milestones, and deliverables are completed on time.
• Communicate progress through GRC platforms and internal systems.
• Design and facilitate tabletop exercises; track and manage follow-up actions.
• Build and maintain client relationships; contribute to meeting agendas and compliance roadmaps.
• Provide ongoing guidance on compliance requirements and best practices.
• Support team operations by handling escalations and mentoring junior team members.
• Other duties as assigned.

Skills

Compliance

Auditing

IT Security

Regulatory knowledge

Education

Bachelor’s degree in IT, Compliance, Security, or related field

Job description

Charles IT in Chesapeake, VA is seeking a Sr. Compliance Administrator to develop, implement, and maintain policies ensuring regulatory compliance across frameworks such as SOC 2, NIST, HIPAA, and CMMC.

The role partners with clients and internal teams and serves as a point of contact for external auditors. You will manage policy assessments, gap analyses, risk reviews, and audits, coordinate with external auditors, and mentor junior staff while guiding remediation efforts and driving compliance