Security Compliance & Implementation Contractor

Job Details

Contract:

6 Month Contract

Salary: $60 - $70 per hour

Hosted by:
Dawit Demoz

• Health Care
• 401K Access
• 40 Hours of sick time

We are seeking a hands‑on Security Compliance & Implementation Consultant to lead and execute security and compliance initiatives across a growing enterprise environment. This role is ideal for someone who combines strong cybersecurity knowledge with the technical ability to implement security controls, configure platforms, develop policies, and drive compliance efforts to completion.

The organization has already invested in compliance assessment tooling and has identified gaps, remediation plans, and security objectives. The consultant will be responsible for taking those findings and translating them into action by implementing technical controls, developing governance processes, and ensuring alignment with regulatory and security frameworks.

This individual will work closely with leadership, IT teams, and business stakeholders to strengthen the organization's security posture while supporting initiatives related to ITAR compliance, NIST frameworks, data protection, governance, and future compliance readiness efforts.

Security Compliance & Governance

Review and analyze security gaps, compliance findings, and remediation plans identified through governance, risk, and compliance (GRC) platforms such as Tenacy or similar solutions.

Lead implementation efforts related to security and compliance initiatives.

Develop, maintain, and improve security policies, procedures, standards, and governance documentation.

Support and strengthen compliance efforts related to:

• ITAR (International Traffic in Arms Regulations)
• NIST Cybersecurity Framework (CSF)
• NIST 800-171
• Data Privacy and Data Protection Requirements
• ISO 27001
• SOC 2
• Future CMMC readiness initiatives

Assist with risk assessments, control reviews, and security maturity evaluations.

Maintain compliance evidence, documentation, audit artifacts, and remediation tracking.

Translate compliance requirements into technical and operational security controls.

Configure and administer security solutions across cloud, endpoint, and identity environments.

Implement and manage:

• Multi‑Factor Authentication (MFA)
• Conditional Access Policies
• Identity & Access Management (IAM)
• Privileged Access Controls
• Data Loss Prevention (DLP)
• Endpoint Protection Platforms
• Vulnerability Management Solutions
• Security Monitoring and Logging Controls

Perform security configuration reviews and recommend improvements to reduce organizational risk.

Collaborate with internal IT teams to remediate security findings and close compliance gaps.

Implement security best practices related to access control, asset management, encryption, logging, monitoring, and data protection.

Support security initiatives within Azure and Microsoft 365 environments.

Configure and manage security features across:

• Microsoft Entra  (Azure AD)
• Microsoft Defender Suite
• Microsoft Purview
• Conditional Access
• Intune
• Microsoft Security Center

Evaluate cloud security posture and recommend improvements.

Assist with implementation of secure architecture and cloud governance controls.

Partner directly with executive leadership and business stakeholders to prioritize remediation activities.

Provide regular status updates regarding compliance initiatives and security projects.

Lead meetings, workshops, and security reviews with technical and non‑technical audiences.

Drive projects from assessment through implementation and validation.

Manage multiple initiatives simultaneously while maintaining strong communication and accountability.

• 5+ years of experience in Cybersecurity, Information Security, Security Engineering, Compliance, or Security Consulting.
• Demonstrated experience implementing security controls rather than solely performing assessments or audits.
• Experience supporting organizations subject to ITAR requirements.
• Strong knowledge of:
• NIST Cybersecurity Framework
• NIST 800-171
• Security Governance & Compliance
• Risk Management
• Identity & Access Management
• En…