Custom Computer Specialists
Level II Technician / IT Compliance & Documentation
Eastport, New York•Full-time
$65,000 - $74,500 annually
$65,000 - $74,500 annually
About the Job
CCS is looking for a motivated technical professional to join our team as an IT Compliance & Documentation Specialist who writes and maintains policies, plans, and procedures that keep our clients secure, compliant, and ready for the unexpected. You will turn technical practice into clear documentation aligned with the NIST Cybersecurity Framework, and help roll out the processes behind it, from multifactor authentication to user audits.
Salary: $65,000.00 – 74,500.00
What You'll Do:
Documentation
Create, maintain, and review core security and IT governance documents, including:
- NIST documentation: map controls and practices to the NIST Cybersecurity Framework (and NIST SP 800-53 / 800-171 where required) and track gaps.
- Protocol and process documentation: standard operating procedures, runbooks, and how-to guides for technical staff.
- Acceptable Use Policies: define acceptable use of systems, networks, devices, and data.
- Disaster recovery planning: backup, restoration, and business continuity plans with defined recovery time and recovery point objectives.
- Incident Response Plan: roles, escalation paths, communication templates, and post-incident review steps.
- Safety Plan: physical and digital safety procedures, coordinated with facilities and leadership.
- Password Policies: complexity, rotation, storage, and password manager standards.
- Chromebook Policies: device management, usage, assignment, repair, and return procedures.
- Onboarding / Offboarding policies: account provisioning, access grants, equipment issue, and timely deprovisioning.
Process development:
- Software, user, and responsibility charts: build and maintain software inventories, user/role matrices, and RACI charts.
- Multifactor deployment: plan, document, and support MFA rollouts, including user communication and training materials.
- User auditing: run recurring access reviews, identify stale or excess permissions, and report findings.
- Project management and scope definitions: write project scopes, track milestones, and coordinate with technical staff and stakeholders.
- Perform other job-related duties as assigned.
Ongoing:
- Review and update documents on a set schedule, at least annually or after major changes.
- Keep documentation organized, version-controlled, and easy to find.
- Support audits, assessments, and compliance reviews with evidence and records.
What success looks like:
- Coverage: share of required policies and plans that exist, are approved, and were reviewed in the last 12 months (target: 100%).
- MFA adoption: share of accounts with MFA enforced (target: 95%+, with documented exceptions).
- Audit timeliness: user access reviews finished on schedule, with stale accounts removed within 5 business days of being found.
- Offboarding speed: access removed for departing users within 24 hours.
- Project delivery: documented scopes finished on time and within scope.
- Usability: staff and clients can find and follow the documents without needing to escalate.
What You'll Bring:
- 2+ years in IT, IT compliance, security, or technical writing
- Working knowledge of the NIST Cybersecurity Framework and common security controls.
- Experience writing policies, procedures, or technical documentation for non-technical readers.
- Familiarity with identity and access management, including MFA and user provisioning.
- Experience with Microsoft 365 and/or Google Workspace administration concepts.
- Strong organization skills and the ability to manage several documents and projects at once.