IT Compliance Specialist

Position: IT Compliance Specialist

Location: Melville, NY

Rate: All Inclusive

Duration: 6 months+

Job Description:

We are seeking an experienced IT Compliance Specialist to oversee, maintain, and strengthen compliance across PCI-DSS, SOX (ITGC), and CMMC / NIST SP 800-171.

You will act as the primary SME designing controls, managing audits, driving remediation, and translating regulatory requirements into engineering practices.

Key Responsibilities

PCI-DSS Compliance

Lead annual PCI-DSS 4.0 compliance, scoping, gap assessments, and AOC/ROC or SAQ coordination.

Partner with engineering and operations to enforce payment data segmentation, tokenization, and encryption standards.

Oversee quarterly vulnerability scans, penetration testing schedules, and log monitoring.

SOX (Sarbanes-Oxley) ITGC Compliance

Own execution and testing of ITGC and ITAC controls supporting SOX 404. Audit access management, change management, SDLC, and IT operations controls.

Serve as primary liaison to financial auditors for walkthroughs, evidence collection, and remediation tracking.

CMMC & Defence Compliance

Lead readiness and maintenance for CMMC 2.0 (Level 2+) and NIST SP 800-171/800-172. Maintain critical documentation, including SSP, POA&M, and scoping architecture.

Track SPRS scores and prepare the organization for C3PAO third-party assessments.

Governance, Audit & Risk Management

Perform cross-framework mapping to minimize control redundancy.

Track control gaps and manage corrective action plans (CAPs) to closure.

Utilize automated GRC tools for continuous monitoring and provide executive status reporting.

For more details, please share your resume at

Thank you