Level II Technician / IT Compliance & Documentation

Custom Computer Specialists•Eastport, NY

About The Position

CCS is seeking a motivated technical professional to write and maintain policies, plans, and procedures that help clients stay secure, compliant, and prepared for unexpected events. The specialist translates technical practices into clear documentation aligned with the NIST Cybersecurity Framework and helps implement supporting processes, including multifactor authentication and user audits. The role develops and maintains security and IT governance documentation, such as NIST control mappings, operating procedures, acceptable use policies, disaster recovery and incident response plans, safety procedures, password standards, Chromebook procedures, and onboarding and offboarding policies. It also supports software and user inventories, responsibility charts, MFA deployment, recurring access reviews, project scoping and coordination, and audit and compliance activities. Documentation must be reviewed on a set schedule, at least annually or after major changes, and kept organized, version-controlled, and accessible. Success is measured by policy coverage and review status, MFA adoption, timely access reviews and offboarding, delivery of project scopes, and the usability of documentation for staff and clients. Salary: $65,000–$74,500.

Requirements

At least 2 years of experience in IT, IT compliance, security, or technical writing.
Working knowledge of the NIST Cybersecurity Framework and common security controls.
Experience writing policies, procedures, or technical documentation for non-technical readers.
Familiarity with identity and access management, including MFA and user provisioning.
Experience with Microsoft 365 and/or Google Workspace administration concepts.
Strong organizational skills and ability to manage multiple documents and projects.

Responsibilities

Create, maintain, and review security and IT governance documentation, including NIST control mappings and gap tracking.
Write standard operating procedures, runbooks, and how-to guides for technical staff.
Develop acceptable use, disaster recovery, incident response, safety, password, Chromebook, onboarding, and offboarding policies and plans.
Build and maintain software inventories, user and role matrices, and RACI charts.
Plan, document, and support multifactor authentication rollouts, including user communications and training materials.
Conduct recurring access reviews, identify stale or excessive permissions, and report findings.
Write project scopes, track milestones, and coordinate with technical staff and stakeholders.
Review and update documents at least annually or after major changes; keep them organized, version-controlled, and easy to find.
Support audits, assessments, and compliance reviews by providing evidence and records.
Perform other job-related duties as assigned.