Technology Compliance Consultant | Maine
At Systems Engineering, our mission is to enable the exceptional with our clients, employees, and the community.
As a result, we continue to invest heavily in being the premier technology employer in Northern New England. We are 100% employee-owned which gives us the unique opportunity to combine shared equity with empowerment to create an incredible career development opportunity.
We are seeking a full-time Technology Compliance Consultant to join our Advisory Services team. Technology Compliance Consultants draw on technical, business, and managerial skills to help clients develop, improve, and execute their information security programs to support compliance initiatives and improve the overall security posture of organizations.
This role works highly independently with clients and internal resources to develop, track, and aid in compliance and governance programs on a recurring basis. You will work extensively with clients throughout New England to deliver professional consultative services in a variety of areas, including:
- Information security risk assessment information gathering, program development and oversight.
- Business Continuity Plan development.
- Compliance and gap analysis with common frameworks and regulatory requirements (NIST Cybersecurity Framework, NIST 800-53, 800-171, NYS DFS, CMMC, etc.).
- Utilize Governance, Risk, and Compliance (GRC) tools to track and communicate compliance program status.
- Generation, analysis, and distribution of compliance state reporting & compliance activity tracking and planning.
- Provide technical vulnerability management support and guidance.
- Preparation of evidence for client compliance audits.
- Participation on and leadership of client security committees.
- Mentoring and training internal resources, and leading smaller projects.
Responsibilities
- Take a strong leadership role with clients to facilitate the development of critical security documents, policies, and practices. This involves working directly with both all c-suite members and technical staff within a client organization.
- Develop and maintain information security, incident response, business continuity, and acceptable use policies for clients. Facilitate the creation and maintenance of these programs, identify compliance gaps, and contribute to risk assessments.
- Facilitate client Tabletop Exercises.
- Work with Senior Technology Consultants to recommend changes to technology, procedures, and policies to secure client networks and meet compliance requirements.
- Identify and communicate recommended security and business continuity controls, plans, and deficiencies for clients. Provide clients with actionable reports.
- Provide input into the creation of detailed project plans, work assignments, and target dates for clients.
- Stay abreast of the ever-changing cybersecurity regulatory environment.
- Occasionally contribute to public or client-facing talks, conferences, or written work.
For immediate consideration, click here to apply.
Requirements
Technical Skills & Experience:
- BS or similar degree preferred; greater progressively responsible experience in technology, IT security, consulting, or audit environments acceptable in lieu of formal education (3-5 years’ experience with a degree, 5-8 years’ without).
- CISSP/CCSP/CIPT or similar certifications preferred; pursuit may begin after hiring.
- Mastery of at least one cybersecurity compliance framework (CSF, 800-171, CIS, etc.).
- Experience with HIPAA, GLBA, PCI-DSS, GLBA, and/or CMMC compliance desired.
- Experience with cloud security technologies, namely Microsoft Office 365, desired.
Technical Leadership Skills:
- Ability to distil complex technical information into broadly comprehensible concepts, and vice versa.
- Experience facilitating/conducting risk assessments and/or audits preferred.
- Must be an excellent written and oral communicator, ability to encourage critical thinking, asking open ended questions.
- Ability to lead a small cross-functional team with minimal direction or oversight.
- Project management, consulting, and audit experience strongly preferred.
- Strong organizational, critical thinking and analytical skills.
- Passion for security, compliance, and governance required!
Our Culture & Benefits
Systems Engineering has three office locations: Our Portland, Maine office is located in the heart of the Old Port in downtown Portland positioned centrally to the waterfront, trails, parks, and restaurants. Our New Hampshire Office is located in the Brady Sullivan Tower just steps from downtown Manchester. Our Pineland Farms Office is located at Durham Hall on the Pineland Farms Campus, New Gloucester, Maine.
Being 100% employee-owned, the employee-owners of Systems Engineering are its most valuable resources who have collectively made Systems Engineering a Best Places to Work Company in Maine for a decade. We pride ourselves on delivering great outcomes for our Culture, Clients, and our Community by cultivating a culture focused on continuous learning, community impact, and Employee-Ownership.
In addition to a competitive salary, our benefits include:
- Employee Ownership (Employee Stock Ownership Plan) – As an employee-owner, you directly contribute to the strategic direction, growth, workplace culture, and future of the company.
- Employer 401k matching contributions.
- Profit-Sharing.
- Competitive medical, dental, life, and short & long-term disability insurance.
- Paid Time Off starting with 17 days PTO, nine paid holidays, and two weeks paid parental leave.
- Community Engagement benefits including (8) hours of paid community volunteer time & employer-charitable match.
- Engaging wellness programs including onsite health coaching & onsite fitness facilities.
- Career mobility and professional development, with employer-supported training, learning, and certification opportunities.
- Dynamic, fun, and active community culture.
- Business casual work attire.
- Hybrid Workplace, which fosters collaboration, mentorship, and training & development opportunities across our organization.
- Employer-provided parking at our office locations.
Due to the nature of our business and the requirements of ITAR regulations, this role may require access to controlled information and technology. Candidates must be U.S. citizens or lawful permanent residents and be willing to undergo a thorough background check as part of the employment process.
