Role Overview:
The Compliance & Audit Specialist is responsible for ensuring that IT operations comply with applicable security standards, internal policies, and regulatory frameworks. The role involves conducting system audits, supporting compliance documentation, and preparing evidence for internal and external assessments.
Key Responsibilities:
•Conduct periodic audits on servers, firewalls, and system configurations.
•Maintain detailed documentation to demonstrate compliance with standards such as CJIS, NIST, and internal security policies.
•Track and coordinate the remediation of non-compliance issues.
•Collaborate with internal teams to create and update IT security and compliance policies.
Required Experience:
•Minimum of 3 years of experience in IT compliance, cybersecurity auditing, or a related field.
•Familiarity with technical controls, GRC (Governance, Risk, and Compliance) tools, and maintaining risk registers.
Preferred Certifications (any of the following):
•CISA – Certified Information Systems Auditor
•CRISC – Certified in Risk and Information Systems Control
•CGEIT – Certified in the Governance of Enterprise IT
Compliance & Regulatory Knowledge:
•CJIS – Criminal Justice Information Services security policy
•NIST 800-53, NIST 800-171 – Security and privacy controls for federal systems and data
•HIPAA, PCI-DSS – Compliance for healthcare and payment card data (as applicable)Role Overview:
The Compliance & Audit Specialist is responsible for ensuring that IT operations comply with applicable security standards, internal policies, and regulatory frameworks. The role involves conducting system audits, supporting compliance documentation, and preparing evidence for internal and external assessments.
Key Responsibilities:
•Conduct periodic audits on servers, firewalls, and system configurations.
•Maintain detailed documentation to demonstrate compliance with standards such as CJIS, NIST, and internal security policies.
•Track and coordinate the remediation of non-compliance issues.
•Collaborate with internal teams to create and update IT security and compliance policies.
Required Experience:
•Minimum of 3 years of experience in IT compliance, cybersecurity auditing, or a related field.
•Familiarity with technical controls, GRC (Governance, Risk, and Compliance) tools, and maintaining risk registers.
Preferred Certifications (any of the following):
•CISA – Certified Information Systems Auditor
•CRISC – Certified in Risk and Information Systems Control
•CGEIT – Certified in the Governance of Enterprise IT
Compliance & Regulatory Knowledge:
•CJIS – Criminal Justice Information Services security policy
•NIST 800-53, NIST 800-171 – Security and privacy controls for federal systems and data
•HIPAA, PCI-DSS – Compliance for healthcare and payment card data (as applicable)
Job Type: Contract
Pay: $40.00 - $45.00 per hour
Expected hours: 40 per week
Schedule:
Work Location: In person