IT Compliance Specialist

Job Summary

The IT Compliance Specialist is responsible for helping ensure the organization complies with all applicable federal, state, and local laws, regulations, accreditation standards, contractual obligations, and internal policies. This role monitors compliance activities, conducts audits and risk assessments, investigates potential compliance concerns, develops and maintains compliance programs, and prepares reports and recommendations for leadership. The IT Compliance Specialist works collaboratively across departments to promote ethical business practices, strengthen internal controls, and support a culture of compliance and accountability.

Minimum Qualifications

Demonstrated experience interpreting and implementing cybersecurity, privacy, and compliance requirements applicable to government contractors, nonprofit service providers, or similarly regulated organizations. Relevant frameworks may include NIST, FIPS, FedRAMP or GovRAMP, ISO 27001, SOC, HIPAA, PCI DSS, HITRUST, and as applicable to the organization’s contracts, systems, and data.

Strong analytical and problem-solving skills, including the ability to assess cybersecurity and compliance risks, recommend practical solutions, manage competing priorities, and work independently.

Must hold one or more relevant certifications such as Certified in Risk and Information Systems Control (CRISC), Certified Compliance and Ethics Professional (CCEP), Certified Regulatory Compliance Manager (CRCM), Certified in Healthcare Compliance (CHC), or Certified Information Systems Auditor (CISA).

Preferred Education: Bachelor’s degree in Information Systems, Cybersecurity, Healthcare Information Technology, Public Administration, or a related field.

Essential Job Duties and Responsibilities

Key Responsibilities

• ·Conduct compliance monitoring, audits, and risk assessments.
• ·Review organizational policies and procedures for regulatory compliance.
• ·Identify, investigate, and document compliance issues and recommend corrective actions.
• ·Track regulatory changes and assess organizational impact.
• ·Develop and deliver compliance training and awareness programs.
• ·Maintain compliance records, documentation, and reporting.
• ·Assist with internal and external audits, inspections, and accreditation reviews.
• ·Collaborate with department leaders to implement and monitor corrective action plans.
• ·Prepare compliance reports, metrics, and presentations for management and governingbodies.

Government Contract and Regulatory Compliance

Review state contracts, grant requirements, data-use agreements, business associate agreements, and applicable laws and regulations to identify cybersecurity, privacy, records-management, audit, breach-notification, and incident-reporting obligations. Maintain a compliance calendar and requirements register; assign control owners; preserve supporting evidence; monitor deliverables and remediation deadlines; and promptly escalate potential noncompliance to appropriate leadership.

Coordinate identity and access management controls with Information Technology Leadership and system owners, including account provisioning and termination, role-based and privileged access, multifactor authentication, periodic access reviews, segregation of duties, and timely removal of access when employment, assignments, or vendor relationships change. Document exceptions and escalate unresolved access risks to appropriate leadership.

Core Values/Ethical Conduct

• The ability to model the organization’s Core Values of Accountability, Community Impact, Compassion, Trustworthiness, and Teamwork.
• The ability to interact with donors, clients, staff, partners, volunteers, and funders with respect, professionalism, honesty, and fairness.
• The ability to maintain confidentiality and integrity in all donor, client, financial, and organizational matters.
• The ability to use organizational resources, funds, information, and time responsibly and wisely.
• The ability to follow organizational policies and ethical practices and avoid conflicts of interest.
• The ability to embrace innovation, collaboration, and creative problem-solving while remaining accountable for decisions and actions.
• The ability to represent the organization and its mission accurately, professionally, and ethically.

Working Here

We believe in supporting our employees and their families as they journey throughout life. Our commitment to our full-time staff includes the following benefits:

A competitive benefits package with health, vision, and dental coverage, HSA, Dependent Care FSA, group life insurance, Teladoc (telemedicine), EAP mental health resources, and short & long-term disability options.

Up to 4% matching 401(k) employer contribution, plus a 3% base contribution.

Generous paid time off to support work-life balance.

Employee discounts on paid services

Our culture is important and we’ve included it in our strategic plan by creating goals which include creating a culture of belonging where everyone has what they need to succeed and thrive and investing in developing the next generation of leaders. Join us in our mission to create a community of lifelong independence, where your contributions are valued, and your professional growth is nurtured. Together, we can make a difference.

Signal Centers is an equal opportunity employer and seeks to affirm the dignity and worth of every person in all that we do. It is, therefore, the policy of the organization to practice and ensure the fair and equitable treatment of all employees and to promote the full realization of this policy through all employment practices.