Compliance Administrator

TechR2, LLC•Pataskala, OH

About The Position

The Compliance Administrator owns and administers TechR2’s compliance program, ensuring alignment with customer contracts, applicable laws and regulations, and the management system standards to which the Company is certified. The role administers the integrated management system, plans and leads internal audits, conducts risk assessments, and represents TechR2 in registrar and customer audits. It reports directly to the CEO on compliance status, audit results, and risk. The role manages the compliance program and document control, reviews and recommends updates to policies and procedures, monitors regulatory and industry developments, and evaluates work processes against production, quality, and customer-service standards. It administers TechR2’s ISO certifications and maintains integrated management systems covering quality, environmental management, occupational health and safety, information security, and supply chain integrity, as well as other industry certifications held by the Company. The Compliance Administrator develops an annual risk-based audit schedule and leads audits against applicable standards and requirements, including ISO standards, NIST SP 800-171, HIPAA, PCI DSS, and customer-requested audits. The role also performs SOC 2 readiness and control assessments, documents audit work, tracks corrective actions through closure, and coordinates with external auditors, customers, and regulators. It conducts risk assessments across cybersecurity, environmental, health and safety, and physical security; works with teams on risk treatment plans; and recommends improvements to internal controls and operational effectiveness. The position prepares compliance and audit reports, provides regular and on-demand briefings to company leadership, and maintains professional knowledge through training and continuing education. Work is primarily office-based, with regular walkthroughs of warehouse, processing, and data destruction areas during audits. Travel may include customer sites and audits.

Requirements

Bachelor’s degree in information systems, cybersecurity, accounting, business administration, occupational safety, or a related field, or an equivalent combination of education and experience.
At least 5 years of experience in compliance, internal audit, risk management, or management systems.
At least 2 years administering or auditing ISO management systems.
Experience hosting third-party certification or customer audits.
Working knowledge of ISO 19011 audit methods, ISO 31000 risk principles, and internal control concepts.
Strong written and verbal communication skills, including executive briefings and audit reports.
Highly organized and detail-oriented, with sound judgment and problem-solving skills.
Ability to work independently and manage multiple audits and deadlines.
Ability to build working relationships across departments while maintaining objectivity.
Proficiency with Microsoft 365 and document control systems.
Ability to wear required PPE in production areas.
Ability to travel up to 10%, including occasional overnight travel to customer sites or audits.

Nice To Haves

Experience with information security frameworks, including ISO/IEC 27001, NIST SP 800-171, and SOC 2.
Experience in IT asset disposition, data destruction, electronics recycling, or a regulated service industry.
Completion of an accredited ISO Lead Auditor course—ISO/IEC 27001 preferred; ISO 9001, ISO 14001, or ISO 45001 accepted—within 12 months of hire if not already held.
CISA, CIA, CRISC, or CCEP certification.

Responsibilities

Manage and enforce a compliance program aligned with customer contracts, agreements, laws, and regulations.
Review, update, and recommend company policies and procedures.
Own document control for policies, procedures, manuals, forms, work instructions, and records.
Track regulatory and industry developments and recommend program changes.
Monitor work processes against production, quality, and customer-service standards and identify process improvements.
Administer TechR2’s ISO certifications and certification process.
Implement and maintain integrated management systems for ISO 9001, ISO 14001, ISO 45001, ISO/IEC 27001, and ISO/IEC 20243, along with other industry certifications held by the Company.
Represent TechR2 during surveillance, recertification, and other third-party audits.
Build and maintain an annual risk-based internal audit schedule.
Plan and lead internal audits against ISO standards, NIST SP 800-171, HIPAA, PCI DSS, and customer-requested audit requirements.
Perform SOC 2 readiness and control assessments in preparation for independent CPA examinations.
Examine records, reports, operating practices, and documentation; test controls and detect discrepancies.
Document audit work papers, findings, and memoranda.
Track corrective actions to closure and verify their effectiveness.
Coordinate with external auditors, customers, and regulators during assessments.
Conduct cybersecurity, environmental, health and safety, and physical security risk assessments using ISO 31000 principles.
Work with cross-functional teams to develop and carry out risk treatment plans.
Recommend improvements to the internal control structure.
Deliver regular and on-demand briefings to the VP of Operations and CEO.
Prepare management reports summarizing compliance status, audit results, open findings, and risk trends.
Recommend actions to improve compliance, operational efficiency, and control effectiveness.
Maintain professional knowledge through training and continuing education.