IT & Cybersecurity Compliance Specialist

Pearl

. Administer and maintain core IT systems including endpoint management, identity and access management (IAM), and SaaS tooling such as Google Workspace, Slack, and Notion .

Posted 10/2/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT administration and compliance management, with a strong focus on security frameworks such as SOC 2, HIPAA, and GDPR. Proficient in managing IT systems, endpoint management, and SaaS tools while ensuring adherence to security best practices and regulatory requirements.

Highest-signal resume keywords

IT AdministrationSOC 2 ComplianceHIPAA ComplianceEndpoint ManagementVanta Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity And Access ManagementSaaS AdministrationMDM SolutionsSecurity AssessmentsCompliance MonitoringIncident ResponseRisk AssessmentsSecurity Breach DocumentationPhishing Simulation ManagementIT Asset Inventory Management

Soft Skills

Excellent Communication SkillsAbility To Work IndependentlyCollaborative Teamwork

Tools & Technologies

Google WorkspaceSlackNotionGRC ToolsIT Helpdesk Software

Certifications & Qualifications

CISACISMCISSPCompTIA Security+

Industry Keywords

Compliance ProgramsSecurity And Privacy AuditsISO 27001ISO 27701CCPAMedical Device ComplianceFDA Submissions

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Administer and maintain core IT systems including endpoint management, identity and access management (IAM), and SaaS tooling such as Google Workspace, Slack, and Notion
Manage employee onboarding and offboarding, including provisioning and deprovisioning accounts, hardware, and system access
Maintain and enforce IT access controls, role-based permissions, and least privilege across systems
Serve as the first point of escalation for internal IT support requests and tickets, triaging and resolving technical issues
Manage the company device fleet, including MDM enrollment, patching, and compliance monitoring
Administer and monitor cloud infrastructure and SaaS platform configurations for security and availability
Maintain IT asset inventory and manage software licensing
Conduct compliance gap assessments for SOC 2, HIPAA, GDPR, and related regulations
Develop, write, and revise security and privacy SOPs
Implement and monitor security KPIs
Assess, document, and report security breaches or incidents
Perform security assessments of new and existing suppliers, including annual reviews
Conduct information security incident reviews and recommend corrective actions
Manage security and privacy CAPAs
Prepare for and manage security and privacy audits
Complete security questionnaires for clients, vendors, and partners
Monitor evolving security and privacy regulations and update policies and procedures
Administer Vanta or an equivalent GRC tool for compliance monitoring and evidence collection
Oversee security and privacy training programs
Design and execute phishing simulation campaigns and related training
Host recurring security committee meetings and management reviews

Requirements

What you’ll need

3+ years of experience in IT administration, systems management, or a combined IT/security role
3+ years of experience implementing and maintaining SOC 2 certification
3+ years of experience with HIPAA, GDPR, and other global privacy frameworks
Proven track record of managing compliance programs, including audits, risk assessments, and CAPAs
Hands-on experience with compliance tools such as Vanta or similar platforms
Demonstrated experience with endpoint management, IAM platforms, MDM solutions, and SaaS administration
Strong understanding of cybersecurity best practices, incident response, and supplier risk management
Excellent written and verbal communication skills, with the ability to translate complex requirements into actionable processes
Ability to work independently and collaboratively in a fast-paced environment
Relevant certifications (e.g., CISA, CISM, CISSP, CompTIA Security+, or equivalent) are a plus
Experience in a SaaS company is strongly preferred
Experience in a medical device company and/or supporting FDA submissions
Experience with ISO 27001, ISO 27701, CCPA, or other international security/privacy frameworks
Background in managing phishing simulation programs and employee training initiatives
Familiarity with SaaS-specific compliance challenges and customer-facing security requirements
Experience with Google Workspace administration and IT helpdesk/ticketing workflows
Comfort operating as a one-person or small-team IT function in a high-growth environment

Benefits

Comp & perks

Competitive Benefit and Compensation Offerings
Ongoing Training and Development Opportunities
Unaccrued, Flexible PTO
Remote Work