Job Description
CCS is looking for a motivated technical professional to join our team as an IT Compliance & Documentation Specialist who writes and maintains policies, plans, and procedures that keep our clients secure, compliant, and ready for the unexpected. You will turn technical practice into clear documentation aligned with the NIST Cybersecurity Framework, and help roll out the processes behind it, from multifactor authentication to user audits.
Salary: $65,000.00 – 74,500.00
What You'll Do:
Documentation
Create, maintain, and review core security and IT governance documents, including:
- NIST documentation: map controls and practices to the NIST Cybersecurity Framework (and NIST SP 800-53 / 800-171 where required) and track gaps.
- Protocol and process documentation: standard operating procedures, runbooks, and how-to guides for technical staff.
- Acceptable Use Policies: define acceptable use of systems, networks, devices, and data.
- Disaster recovery planning: backup, restoration, and business continuity plans with defined recovery time and recovery point objectives.
- Incident Response Plan: roles, escalation paths, communication templates, and post-incident review steps.
- Safety Plan: physical and digital safety procedures, coordinated with facilities and leadership.
- Password Policies: complexity, rotation, storage, and password manager standards.
- Chromebook Policies: device management, usage, assignment, repair, and return procedures.
- Onboarding / Offboarding policies: account provisioning, access grants, equipment issue, and timely deprovisioning.
Process development:
- Software, user, and responsibility charts: build and maintain software inventories, user/role matrices, and RACI charts.
- Multifactor deployment: plan, document, and support MFA rollouts, including user communication and training materials.
- User auditing: run recurring access reviews, identify stale or excess permissions, and report findings.
- Project management and scope definitions: write project scopes, track milestones, and coordinate with technical staff and stakeholders.
- Perform other job-related duties as assigned.
Ongoing:
- Review and update documents on a set schedule, at least annually or after major changes.
- Keep documentation organized, version-controlled, and easy to find.
- Support audits, assessments, and compliance reviews with evidence and records.
What success looks like:
- Coverage: share of required policies and plans that exist, are approved, and were reviewed in the last 12 months (target: 100%).
- MFA adoption: share of accounts with MFA enforced (target: 95%+, with documented exceptions).
- Audit timeliness: user access reviews finished on schedule, with stale accounts removed within 5 business days of being found.
- Offboarding speed: access removed for departing users within 24 hours.
- Project delivery: documented scopes finished on time and within scope.
- Usability: staff and clients can find and follow the documents without needing to escalate.
What You'll Bring:
- 2+ years in IT, IT compliance, security, or technical writing
- Working knowledge of the NIST Cybersecurity Framework and common security controls.
- Experience writing policies, procedures, or technical documentation for non-technical readers.
- Familiarity with identity and access management, including MFA and user provisioning.
- Experience with Microsoft 365 and/or Google Workspace administration concepts.
- Strong organization skills and the ability to manage several documents and projects at once.
Numbers & Facts
| Location | Eastport, New York |
| Industry | Computer/IT Services |
| Salary | $65,000–$74,500 |
| Company Size | 100 to 499 employees |
| Year Founded | 1979 |
| Website | http://www.customtech.com/ |
Benefits
Paid Sick Days, 401K, Concierge Services, Employee Referral Program, Flexible Spending Accounts, Employee Events, Tuition Reimbursement
About Company
Right People, Right Results is not just our tag line - it is our obsession. It drives our behavior, our culture and our work. It's why technology leaders continue to trust Custom Computer Specialists with their most important asset - their reputation.
Since 1979, IT leaders with a commitment for leveraging technology to better serve their customers have partnered with Custom's Right People to deliver the Right Results. Our "Clients for Life" approach to the marketplace has enabled Custom to maintain extremely high client retention rates.
Skills
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesResume Builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Resume Builder