IT and Compliance Specialist

The IT and Compliance Specialist role is a hybrid position that combines cybersecurity compliance leadership with hands-on information technology support. This role is on-site. Working for our client, the successful candidate will play a critical role in maintaining compliance with CMMC 2.0, NIST SP 800-171, DFARS, ITAR, EAR, and other U.S. export control requirements while ensuring the reliability, security, and performance of the organization's IT infrastructure. This individual will be responsible for developing and maintaining key compliance documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, and procedures; conducting internal assessments and gap analyses; supporting cybersecurity audits; monitoring evolving regulatory requirements; and assisting with incident response planning. The position requires an individual who is equally comfortable interpreting cybersecurity frameworks and compliance obligations as they are implementing technical controls and troubleshooting IT systems.

In addition to cybersecurity compliance responsibilities, the specialist will support the organization's export control program by helping manage ITAR and EAR requirements, technology control plans, access controls, visitor and foreign national tracking, denied-party screening, export licensing support, and employee training initiatives. The role also requires maintaining secure IT environments through network segmentation, encryption, and access management controls that protect controlled technical data. Collaboration with legal, security, and operational stakeholders is essential to ensure compliance requirements are integrated throughout the business while mitigating risks associated with cybersecurity and export-controlled information.

The ideal candidate brings a strong foundation in IT administration and network support, with experience installing, configuring, and maintaining servers, firewalls, switches, routers, wireless infrastructure, and structured cabling systems. Responsibilities include managing network documentation, supporting end users, maintaining backup and disaster recovery processes, administering Windows Server and Active Directory environments, and overseeing the IT asset lifecycle. Qualified candidates will possess a degree in Information Technology, Cybersecurity, or a related field, along with at least three years of relevant experience, strong technical documentation skills, and U.S. citizenship. Preferred qualifications include certifications such as Security+, Network+, CCNA, or Certified CMMC Professional (CCP), experience supporting defense contractors, familiarity with vulnerability management and SIEM platforms, and knowledge of government cloud environments. Success in the role requires strong communication skills, attention to detail, adaptability, proactive problem-solving, and the ability to collaborate effectively across technical and non-technical teams.

Sponsorship is not available for this role.