Sr. Compliance Administrator

Exceptional Service, Endless Improvement, Passionate People, and Honest and Forthright. Guided by our values, we foster a culture of growth, balance, and belonging where every team member can thrive.

The Sr. Compliance Administrator is responsible for managing assessments to help develop, implement, and maintain policies and procedures to ensure organizational compliance with regulatory frameworks. This role involves facilitating project tasks with clients, internal teams, and being a point of contact for external auditors to manage compliance activities, conduct assessments, and provide technical guidance. The Sr. Compliance Administrator works under the guidance of the Managed Compliance Supervisor and senior members of the Compliance Team.

Responsibilities:

• Policies: 
• Write new policies to meet regulatory requirements 
• Review and update existing policies to ensure alignment with current frameworks 
• Manage assessments to identify gaps in policies, and update policies to close out gaps 
• Facilitate assessments with clients to review recommended policy changes and to get changes approved by stakeholders  
• Standard Operating Procedures (SOPs): 
• Follow, create, and maintain departmental SOPs 
• Assist clients and provide guidance for their SOPs 
• Governance, Risk, and Compliance (GRC): 
• Set up new clients in the GRC platform and apply baseline compliance standards 
• Review and update baselines 
• Work with clients to ensure they are aligned to baselines 
• Manage internal risk assessments 
• Manage 3rd party risk assessments 
• Create and assign compliance tasks for clients and team members 
• Compliance Frameworks: 
• Manage framework assessments to identify gaps in a client’s adherence to one or more compliance frameworks: 
• CCPA 
• CMMC 
• FINRA 
• HIPPA 
• NIST CSF 2.0 
• NYDFS 
• SOC 2 
• Other frameworks as needed 
• Advise clients on how to remediate gaps 
• Manage and facilitate gap remediation  
• External Auditors and Assessors: 
• Manage and facilitate evidence collection tasks on behalf of clients 
• Review collected evidence and provide evidence to external auditors and assessors 
• Respond to follow-up questions and due diligence questionnaires (DDQs) on behalf of clients  
• Projects: 
• Manage projects, and act as a senior project resource when needed 
• Ensure projects tasks, milestones and deliverables are completed on schedule 
• Assist in the timely and successful delivery of projects according to clients' business needs and objectives 
• Clearly communicate the progress of initiatives through the GRC platform and within our ticketing system 
• Tabletop Exercises: 
• Design annual tabletop exercise scenarios 
• Run tabletop exercise with clients 
• Manage follow-up action items, and keep clients updated on their status  
• Account Management: 
• Help build and maintain strong, long-lasting client relationships 
• Provide insight into client’s monthly meeting agenda items and client roadmaps 
• Work with clients to approve policies and conduct assessments 
• Provide technical guidance on compliance requirements  
• Team Efficiency: 
• Support team members and handle escalations from junior team members 
• Lead junior team members, and provide mentoring and guidance 

• Bachelor’s degree in IT, Compliance, Security, or related field (or equivalent experience)

• 5+ years of experience in compliance, auditing, or IT/security
• Experience with GRC platforms, policy management, and audit processes
• Strong knowledge of frameworks such as SOC 2, NIST, HIPAA, CMMC, and NYDFS
• Ability to communicate effectively with both technical teams and executive stakeholders
• Strong organizational and multitasking skills
• Relevant certifications (CISA, CIPP, CCP, or similar) preferred
• Self-starter with the ability to work independently
• Valid U.S. driver’s license and ability to pass a background check

Charles IT offers a comprehensive benefits package, including medical, dental, vision, life and disability insurance, paid holidays, PTO, 401(k), and performance-based bonuses. Team members also enjoy ongoing training, professional development, quarterly team-building events, and a collaborative workplace culture. 

Commitment to Inclusion: Charles IT is an equal opportunity employer committed to fostering an inclusive and respectful work environment. We welcome diverse backgrounds and perspectives and do not discriminate based on any protected characteristic. 

The information contained in this job description is for compliance with the American with Disabilities Act (A.D.A.) and is not an exhaustive list of the duties performed for this position. Additional duties may be required.