Sr. Compliance Administrator

Charles IT; Middletown (CT); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Charles IT in Middletown, CT is seeking a Sr. Compliance Administrator to manage assessments and help develop, implement, and maintain policies and procedures ensuring regulatory compliance. You will coordinate with clients, internal teams, and external auditors.

The role reports to the Managed Compliance Supervisor and involves driving policy gaps remediation, overseeing governance, risk, and compliance activities, and guiding teams through frameworks such as SOC 2, NIST, HIPAA, and NYDFS.

Qualifications

• Bachelor’s degree in IT, Compliance, Security, or related field.
• 5+ years of experience in compliance, auditing, or IT/security.
• Experience with GRC platforms, policy management, and audit processes.
• Strong knowledge of SOC 2, NIST, HIPAA, CMMC, and NYDFS frameworks.
• Effective communication with technical teams and executive stakeholders.

Responsibilities

• Write, update, and manage policies to meet regulatory requirements.
• Develop and maintain SOPs for the department and guide clients on their SOPs.
• Set up and maintain client baselines in the GRC platform and review baselines.
• Lead framework assessments and advise on gap remediation with clients.
• Coordinate evidence collection and respond to DDQs for auditors and assessors.
• Manage projects, milestones, and deliverables with clients and team members.
• Design tabletop exercise scenarios and run tabletop sessions with clients.
• Foster strong client relationships and provide technical guidance on compliance requirements.
• Mentor junior team members and support team efficiency.

Skills

GRC platforms

Policy management

Audit processes

Stakeholder communication

Education

Bachelor’s degree in IT, Compliance, Security, or related field

Certifications: CISA, CIPP, CCP

Tools

GRC platforms

Job description

Exceptional Service, Endless Improvement, PassionatePeople, andHonest and Forthright.Guided by our values, we foster a culture of growth, balance, and belonging where every team member can thrive.

The Sr. Compliance Administrator is responsible for managing assessments to help develop, implement, and maintain policies and procedures to ensure organizational compliance with regulatory frameworks. This role involves facilitating project tasks with clients, internal teams, and being a point of contact for external auditors to manage compliance activities, conduct assessments, and provide technical guidance. The Sr. Compliance Administrator works under the guidance of the Managed Compliance Supervisor and senior members of the Compliance Team.

Responsibilities:

• Policies:
  • Write new policies to meet regulatory requirements
  • Review and update existing policies to ensure alignment with current frameworks
  • Manage assessments to identify gaps in policies, and update policies to close out gaps
  • Facilitate assessments with clients to review recommended policy changes and to get changes approved by stakeholders
• Standard Operating Procedures (SOPs):
  • Follow, create, and maintain departmental SOPs
  • Assist clients and provide guidance for their SOPs
• Governance, Risk, and Compliance (GRC):
  • Set up new clients in the GRC platform and apply baseline compliance standards
  • Review and update baselines
  • Work with clients to ensure they are aligned to baselines
  • Manage internal risk assessments
  • Manage 3rd party risk assessments
  • Create and assign compliance tasks for clients and team members
• Compliance Frameworks:
  • Manage framework assessments to identify gaps in a client’s adherence to one or more compliance frameworks:
  • CCPA
  • CMMC
  • FINRA
  • HIPPA
  • NIST CSF 2.0
  • NYDFS
  • SOC 2
  • Other frameworks as needed
  • Advise clients on how to remediate gaps
  • Manage and facilitate gap remediation
• External Auditors and Assessors:
  • Manage and facilitate evidence collection tasks on behalf of clients
  • Review collected evidence and provide evidence to external auditors and assessors
  • Respond to follow-up questions and due diligence questionnaires (DDQs) on behalf of clients
• Projects:
  • Manage projects, and act as a senior project resource when needed
  • Ensure projects tasks, milestones and deliverables are completed on schedule
  • Assist in the timely and successful delivery of projects according to clients' business needs and objectives
  • Clearly communicate the progress of initiatives through the GRC platform and within our ticketing system
• Tabletop Exercises:
  • Design annual tabletop exercise scenarios
  • Run tabletop exercise with clients
  • Manage follow-up action items, and keep clients updated on their status
• Account Management:
  • Help build and maintain strong, long-lasting client relationships
  • Provide insight into client’s monthly meeting agenda items and client roadmaps
  • Work with clients to approve policies and conduct assessments
  • Provide technical guidance on compliance requirements
• Team Efficiency:
  • Support team members and handle escalations from junior team members
  • Lead junior team members, and provide mentoring and guidance

Qualifications:

• Bachelor’s degree in IT, Compliance, Security, or related field (or equivalent experience)
• 5+ years of experience in compliance, auditing, or IT/security
• Experience with GRC platforms, policy management, and audit processes
• Strong knowledge of frameworks such as SOC 2, NIST, HIPAA, CMMC, and NYDFS
• Ability to communicate effectively with both technical teams and executive stakeholders
• Strong organizational and multitasking skills
• Relevant certifications (CISA, CIPP, CCP, or similar) preferredSelf-starter with the ability to work independently
• Valid U.S. driver’s license and ability to pass a background check

Charles IT offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance, paid holidays, PTO, 401(k), and performance-based bonuses. Team members also enjoy ongoing training, professional development, quarterly team-building events, and a collaborative workplace culture.

Commitment to Inclusion:

Charles IT is an equal opportunity employer committed to fostering an inclusive and respectful work environment. We welcome diverse backgrounds and perspectives and do not discriminate based based on any protected characteristic.

The information contained in this job description is for compliance with the American with Disabilities Act (A.D.A.) and is not an exhaustive list of the duties performed for this position. Additional duties may be required.