Sr. Compliance Administrator

Exceptional Service, Endless Improvement, Passionate People, and Honest and Forthright. Guided by our values, we foster a culture of growth, balance, and belonging where every team member can thrive.The Sr. Compliance Administrator is responsible for managing assessments to help develop, implement, and maintain policies and procedures to ensure organizational compliance with regulatory frameworks. This role involves facilitating project tasks with clients, internal teams, and being a point of contact for external auditors to manage compliance activities, conduct assessments, and provide technical guidance. The Sr. Compliance Administrator works under the guidance of the Managed Compliance Supervisor and senior members of the Compliance Team.Responsibilities:Policies: Write new policies to meet regulatory requirements Review and update existing policies to ensure alignment with current frameworks Manage assessments to identify gaps in policies, and update policies to close out gaps Facilitate assessments with clients to review recommended policy changes and to get changes approved by stakeholders Standard Operating Procedures (SOPs): Follow, create, and maintain departmental SOPs Assist clients and provide guidance for their SOPs Governance, Risk, and Compliance (GRC): Set up new clients in the GRC platform and apply baseline compliance standards Review and update baselines Work with clients to ensure they are aligned to baselines Manage internal risk assessments Manage 3rd party risk assessments Create and assign compliance tasks for clients and team members Compliance Frameworks: Manage framework assessments to identify gaps in a client’s adherence to one or more compliance frameworks: CCPA CMMC FINRA HIPPA NIST CSF 2.0 NYDFS SOC 2 Other frameworks as needed Advise clients on how to remediate gaps Manage and facilitate gap remediation External Auditors and Assessors: Manage and facilitate evidence collection tasks on behalf of clients Review collected evidence and provide evidence to external auditors and assessors Respond to follow-up questions and due diligence questionnaires (DDQs) on behalf of clients Projects: Manage projects, and act as a senior project resource when needed Ensure projects tasks, milestones and deliverables are completed on schedule Assist in the timely and successful delivery of projects according to clients' business needs and objectives Clearly communicate the progress of initiatives through the GRC platform and within our ticketing system Tabletop Exercises: Design annual tabletop exercise scenarios Run tabletop exercise with clients Manage follow-up action items, and keep clients updated on their status Account Management: Help build and maintain strong, long-lasting client relationships Provide insight into client’s monthly meeting agenda items and client roadmaps Work with clients to approve policies and conduct assessments Provide technical guidance on compliance requirements Team Efficiency: Support team members and handle escalations from junior team members Lead junior team members, and provide mentoring and guidance RequirementsBachelor’s degree in IT, Compliance, Security, or related field (or equivalent experience)5+ years of experience in compliance, auditing, or IT/securityExperience with GRC platforms, policy management, and audit processesStrong knowledge of frameworks such as SOC 2, NIST, HIPAA, CMMC, and NYDFSAbility to communicate effectively with both technical teams and executive stakeholdersStrong organizational and multitasking skillsRelevant certifications (CISA, CIPP, CCP, or similar) preferredSelf-starter with the ability to work independentlyValid U.S. driver’s license and ability to pass a background checkBenefitsCharles IT offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance, paid holidays, PTO, 401(k), and performance-based bonuses. Team members also enjoy ongoing training, professional development, quarterly team-building events, and a collaborative workplace culture. Commitment to Inclusion: Charles IT is an equal opportunity employer committed to fostering an inclusive and respectful work environment. We welcome diverse backgrounds and perspectives and do not discriminate based on any protected characteristic. The information contained in this job description is for compliance with the American with Disabilities Act (A.D.A.) and is not an exhaustive list of the duties performed for this position. Additional duties may be required.

Exceptional Service, Endless Improvement, Passionate People, and Honest and Forthright. Guided by our values, we foster a culture of growth, balance, and belonging where every team member can thrive.

The Sr. Compliance Administrator is responsible for managing assessments to help develop, implement, and maintain policies and procedures to ensure organizational compliance with regulatory frameworks. This role involves facilitating project tasks with clients, internal teams, and being a point of contact for external auditors to manage compliance activities, conduct assessments, and provide technical guidance. The Sr. Compliance Administrator works under the guidance of the Managed Compliance Supervisor and senior members of the Compliance Team.

Responsibilities:

• Policies:
• Write new policies to meet regulatory requirements
• Review and update existing policies to ensure alignment with current frameworks
• Manage assessments to identify gaps in policies, and update policies to close out gaps
• Facilitate assessments with clients to review recommended policy changes and to get changes approved by stakeholders
• Standard Operating Procedures (SOPs):
• Follow, create, and maintain departmental SOPs
• Assist clients and provide guidance for their SOPs
• Governance, Risk, and Compliance (GRC):
• Set up new clients in the GRC platform and apply baseline compliance standards
• Review and update baselines
• Work with clients to ensure they are aligned to baselines
• Manage internal risk assessments
• Manage 3rd party risk assessments
• Create and assign compliance tasks for clients and team members
• Compliance Frameworks:
• Manage framework assessments to identify gaps in a client’s adherence to one or more compliance frameworks:
• CCPA
• CMMC
• FINRA
• HIPPA
• NIST CSF 2.0
• NYDFS
• SOC 2
• Other frameworks as needed
• Advise clients on how to remediate gaps
• Manage and facilitate gap remediation
• External Auditors and Assessors:
• Manage and facilitate evidence collection tasks on behalf of clients
• Review collected evidence and provide evidence to external auditors and assessors
• Respond to follow-up questions and due diligence questionnaires (DDQs) on behalf of clients
• Projects:
• Manage projects, and act as a senior project resource when needed
• Ensure projects tasks, milestones and deliverables are completed on schedule
• Assist in the timely and successful delivery of projects according to clients' business needs and objectives
• Clearly communicate the progress of initiatives through the GRC platform and within our ticketing system
• Tabletop Exercises:
• Design annual tabletop exercise scenarios
• Run tabletop exercise with clients
• Manage follow-up action items, and keep clients updated on their status
• Account Management:
• Help build and maintain strong, long-lasting client relationships
• Provide insight into client’s monthly meeting agenda items and client roadmaps
• Work with clients to approve policies and conduct assessments
• Provide technical guidance on compliance requirements
• Team Efficiency:
• Support team members and handle escalations from junior team members
• Lead junior team members, and provide mentoring and guidance

Requirements

• Bachelor’s degree in IT, Compliance, Security, or related field (or equivalent experience)

• 5+ years of experience in compliance, auditing, or IT/security
• Experience with GRC platforms, policy management, and audit processes
• Strong knowledge of frameworks such as SOC 2, NIST, HIPAA, CMMC, and NYDFS
• Ability to communicate effectively with both technical teams and executive stakeholders
• Strong organizational and multitasking skills
• Relevant certifications (CISA, CIPP, CCP, or similar) preferred
• Self-starter with the ability to work independently
• Valid U.S. driver’s license and ability to pass a background check

Benefits

Charles IT offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance, paid holidays, PTO, 401(k), and performance-based bonuses. Team members also enjoy ongoing training, professional development, quarterly team-building events, and a collaborative workplace culture.

Commitment to Inclusion: Charles IT is an equal opportunity employer committed to fostering an inclusive and respectful work environment. We welcome diverse backgrounds and perspectives and do not discriminate based on any protected characteristic.

The information contained in this job description is for compliance with the American with Disabilities Act (A.D.A.) and is not an exhaustive list of the duties performed for this position. Additional duties may be required.

Charles IT is the Connecticut Compliance Expert, your friendly IT team focused on helping companies in highly regulated industries make their high-stakes technology work for them. Here, IT is Personal: We know that disaster recovery, cloud services, and complex compliance from HIPAA to CMCC and DFARS are only half the work. The other half is about helping people – building real relationships that deliver real results and create raving fans. Call us day or night, snowstorm or hurricane: a human will answer the phone (we promise), and we will show up, on point, with a smile and a solution.

Charles IT is the Connecticut Compliance Expert, your friendly IT team focused on helping companies in highly regulated industries make their high-stakes technology work for them. Here, IT is Personal: We know that disaster recovery, cloud services, and complex compliance from HIPAA to CMCC and DFARS are only half the work. The other half is about helping people – building real relationships that deliver real results and create raving fans. Call us day or night, snowstorm or hurricane: a human will answer the phone (we promise), and we will show up, on point, with a smile and a solution.