IT Compliance Specialist

IT Compliance Specialist

The IT Compliance Specialist is responsible for helping ensure the organization complies with all applicable federal, state, and local laws, regulations, accreditation standards, contractual obligations, and internal policies. This role monitors compliance activities, conducts audits and risk assessments, investigates potential compliance concerns, develops and maintains compliance programs, and prepares reports and recommendations for leadership. The IT Compliance Specialist works collaboratively across departments to promote ethical business practices, strengthen internal controls, and support a culture of compliance and accountability.

• Demonstrated experience interpreting and implementing cybersecurity, privacy, and compliance requirements applicable to government contractors, nonprofit service providers, or similarly regulated organizations. Relevant frameworks may include NIST, FIPS, FedRAMP or GovRAMP, ISO 27001, SOC, HIPAA, PCI DSS, HITRUST, and as applicable to the organization’s contracts, systems, and data.
• Strong analytical and problem-solving skills, including the ability to assess cybersecurity and compliance risks, recommend practical solutions, manage competing priorities, and work independently.
• Must hold one or more relevant certifications such as Certified in Risk and Information Systems Control (CRISC), Certified Compliance and Ethics Professional (CCEP), Certified Regulatory Compliance Manager (CRCM), Certified in Healthcare Compliance (CHC), or Certified Information Systems Auditor (CISA).
• Preferred Education:
  
  Bachelor’s degree in Information Systems, Cybersecurity, Healthcare Information Technology, Public Administration, or a related field.

• Conduct compliance monitoring, audits, and risk assessments.
• Review organizational policies and procedures for regulatory compliance.
• Identify, investigate, and document compliance issues and recommend corrective actions.
• Track regulatory changes and assess organizational impact.
• Develop and deliver compliance training and awareness programs.
• Maintain compliance records, documentation, and reporting.
• Assist with internal and external audits, inspections, and accreditation reviews.
• Collaborate with department leaders to implement and monitor corrective action plans.
• Prepare compliance reports, metrics, and presentations for management and governing bodies.

• Review state contracts, grant requirements, data-use agreements, business associate agreements, and applicable laws and regulations to identify cybersecurity, privacy, records-management, audit, breach-notification, and incident-reporting obligations. Maintain a compliance calendar and requirements register; assign control owners; preserve supporting evidence; monitor deliverables and remediation deadlines; and promptly
• Coordinate identity and access management controls with Information Technology Leadership and system owners, including account provisioning and termination, role-based and privileged access, multifactor authentication, periodic access reviews, segregation of duties, and timely removal of access when employment, assignments, or vendor relationships change. Document exceptions and escal

• The ability to model the organization’s Core Values of Accountability, Community Impact, Compassion, Trustworthiness, and Teamwork.
• The ability to interact with donors, clients, staff, partners, volunteers, and funders with respect, professionalism, honesty, and fairness.
• The ability to maintain confidentiality and integrity in all donor, client, financial, and organizational matters.
• The…