Level II Technician / IT Compliance & Documentation

Custom Computer Specialists • Hauppauge, NY

9d

About The Position

Custom Computer Specialists is seeking a motivated technical professional to write and maintain policies, plans, and procedures that help clients remain secure, compliant, and prepared for unexpected events. The role translates technical practices into clear documentation aligned with the NIST Cybersecurity Framework and supports implementation of related processes, including multifactor authentication and user audits.

The specialist creates and maintains security and IT governance documentation, develops processes and inventories, supports project scoping and coordination, and conducts ongoing document reviews. They also help clients with audits, assessments, and compliance reviews by organizing evidence and records. The position is listed at an annual salary of $65,000–$74,500.

Requirements

• At least 2 years of experience in IT, IT compliance, security, or technical writing.
• Working knowledge of the NIST Cybersecurity Framework and common security controls.
• Experience writing policies, procedures, or technical documentation for non-technical readers.
• Familiarity with identity and access management, including MFA and user provisioning.
• Experience with Microsoft 365 and/or Google Workspace administration concepts.
• Strong organizational skills and the ability to manage several documents and projects at once.

Responsibilities

• Create, maintain, and review security and IT governance documents, mapping controls and practices to the NIST Cybersecurity Framework and, where required, NIST SP 800-53 or NIST SP 800-171.
• Track gaps in NIST controls and practices.
• Write standard operating procedures, runbooks, and how-to guides for technical staff.
• Develop acceptable use policies covering systems, networks, devices, and data.
• Create disaster recovery, backup, restoration, and business continuity plans with defined recovery time and recovery point objectives.
• Document incident response roles, escalation paths, communication templates, and post-incident review steps.
• Develop physical and digital safety procedures in coordination with facilities and leadership.
• Create password policies covering complexity, rotation, storage, and password manager standards.
• Develop Chromebook device management, usage, assignment, repair, and return procedures.
• Document onboarding and offboarding processes, including account provisioning, access grants, equipment issuance, and timely deprovisioning.
• Build and maintain software inventories, user and role matrices, and RACI charts.
• Plan, document, and support multifactor authentication rollouts, including user communications and training materials.
• Conduct recurring user access reviews, identify stale or excessive permissions, and report findings.
• Write project scopes, track milestones, and coordinate with technical staff and stakeholders.
• Review and update documents on a set schedule, at least annually or after major changes.
• Keep documentation organized, version-controlled, and easy to find.
• Support audits, assessments, and compliance reviews with evidence and records.
• Perform other job-related duties as assigned.

Benefits

• Medical and dental plans.
• Company-paid vision and short- and long-term disability plans.
• Flexible spending programs for healthcare, dependent care, transit, and parking.
• 401(k) with employer match.
• Tuition reimbursement.
• Onsite fitness center or gym membership reimbursement for client- or satellite-based employees.
• Company-paid life insurance.
• Paid holidays and vacation.
• Technical certification gift card rewards program.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed