IT & Cybersecurity Compliance Specialist

Pearl · via Cryptocurrency Jobs

🌎 Remote ⌛ Posted 12 days ago

Apply / More Info ↗️

Job Description:

Administer and maintain core IT systems including endpoint management, identity and access management (IAM), and SaaS tooling such as Google Workspace, Slack, and Notion
Manage employee onboarding and offboarding, including provisioning and deprovisioning accounts, hardware, and system access
Maintain and enforce IT access controls, role-based permissions, and least privilege across systems
Serve as the first point of escalation for internal IT support requests and tickets, triaging and resolving technical issues
Manage the company device fleet, including MDM enrollment, patching, and compliance monitoring
Administer and monitor cloud infrastructure and SaaS platform configurations for security and availability
Maintain IT asset inventory and manage software licensing
Conduct compliance gap assessments for SOC 2, HIPAA, GDPR, and related regulations
Develop, write, and revise security and privacy SOPs
Implement and monitor security KPIs
Assess, document, and report security breaches or incidents
Perform security assessments of new and existing suppliers, including annual reviews
Conduct information security incident reviews and recommend corrective actions
Manage security and privacy CAPAs
Prepare for and manage security and privacy audits
Complete security questionnaires for clients, vendors, and partners
Monitor evolving security and privacy regulations and update policies and procedures
Administer Vanta or an equivalent GRC tool for compliance monitoring and evidence collection
Oversee security and privacy training programs
Design and execute phishing simulation campaigns and related training
Host recurring security committee meetings and management reviews

Requirements:

3+ years of experience in IT administration, systems management, or a combined IT/security role
3+ years of experience implementing and maintaining SOC 2 certification
3+ years of experience with HIPAA, GDPR, and other global privacy frameworks
Proven track record of managing compliance programs, including audits, risk assessments, and CAPAs
Hands-on experience with compliance tools such as Vanta or similar platforms
Demonstrated experience with endpoint management, IAM platforms, MDM solutions, and SaaS administration
Strong understanding of cybersecurity best practices, incident response, and supplier risk management
Excellent written and verbal communication skills, with the ability to translate complex requirements into actionable processes
Ability to work independently and collaboratively in a fast-paced environment
Relevant certifications (e.g., CISA, CISM, CISSP, CompTIA Security+, or equivalent) are a plus
Experience in a SaaS company is strongly preferred
Experience in a medical device company and/or supporting FDA submissions
Experience with ISO 27001, ISO 27701, CCPA, or other international security/privacy frameworks
Background in managing phishing simulation programs and employee training initiatives
Familiarity with SaaS-specific compliance challenges and customer-facing security requirements
Experience with Google Workspace administration and IT helpdesk/ticketing workflows
Comfort operating as a one-person or small-team IT function in a high-growth environment