IT Compliance and Project Coordinator

i4DM•Millersville, MD

About The Position

We are seeking an experienced and driven IT Compliance and Project Manager to join our team. This key role will be responsible for leading the organization through internal and external audits for various industry certifications, including but not limited to ISO 27001 (Information Security Management), ISO 9001 (Quality Management), and CMMC (Cybersecurity Maturity Model Certification) Version 2, Level 2. In addition, our candidate will coordinate IT projects. The ideal candidate will have a strong background in Agile IT Project Management, IT certification compliance, risk assessment, process improvements, and quality assurance. This individual will drive the development and maintenance of documentation, ensure ongoing certification compliance, and manage continuous improvement initiatives across our IT and operational processes.

Requirements

5+ years of experience in compliance, quality management, and information security.
5+ years of experience in IT project coordination, Agile project leadership for small teams
Strong working knowledge of the managed services business and operation of a ticketing system like Halo, ServiceNow, JIRA, etc.
Basic technology understanding (can support minimal Tier1 tickets, excellent communication with technical resources)
Proven experience supporting an IT services organization in achieving and maintaining ongoing compliance with certifications like ISO 27001, ISO 9001, CMMC, SOC 2, etc.
Proven ability to drive tasks to completion, stay organized, collaborate with a large team, and show results
Background in risk management, quality assurance, process improvements, and implementing compliance frameworks.
Demonstrated success in preparing for and managing internal and external audits for multiple certifications.
Have a bias towards thoughtful action. Willing to work with minimal direction, iterate over deliverables until we get it right.
In-depth knowledge of multiple compliance frameworks, including ISO27001, ISO9001, CMMC, SOC 2, and NIST.
Strong understanding of cybersecurity best practices and risk management principles.
Experience creating, reviewing, and editing technical and compliance documentation.
Excellent communication and leadership skills, with the ability to work effectively with cross-functional teams and executive leadership.
Strong organizational skills and the ability to manage multiple projects and priorities simultaneously.
Excellent with Office tools like Excel, Word
Secret clearance eligible.

Responsibilities

Ensure audit readiness and ongoing compliance for our Integrated Management System (IMS) for ISO 27001, ISO 9001, CMMC Version 2 Level 2, and others as required by our growing business.
Create, review, and maintain comprehensive compliance documentation for certifications, including policies, procedures, controls, and work instructions, ensuring they meet the requirements of relevant industry standards.
Oversee compliance with relevant certifications (ISO27001, ISO9001, CMMC, and other applicable standards), ensuring that all IT and business operations align with certification requirements and industry best practices.
Champion continuous improvement initiatives by identifying opportunities to enhance processes, security measures, and quality assurance practices, ensuring alignment with industry standards and evolving business needs.
Monitor regulatory and contractual requirements, advising leadership on changing compliance requirements. Act as SME for ongoing certification efforts.
Work closely with cross-functional teams (e.g., IT, HR, Delivery) to align compliance efforts with broader business objectives, ensuring that all compliance requirements are integrated into day-to-day operations.
Facilitate daily IT briefings and keep meeting minutes.
Collaborate closely with company president, FSO, COO, and CISO to support IT and compliance initiatives as needed.
Coordinate IT projects (outside the scope of organizational compliance) by overseeing adherence to budget, documenting status, keeping meeting minutes, managing deliverables and action items, etc.