IT & Compliance Manager

Armada Ltd•Powell, OH

1d•Remote

About The Position

With our foundation firmly established in Microsoft 365 GCC-High, we are looking for a dedicated IT Operations & Compliance Manager to own our technical ecosystem. This is a high impact, hands-on role responsible for maintaining our CMMC posture, optimizing our SharePoint architecture, and managing our digital presence. You will ensure that our small, agile team remains secure, compliant, and efficient without the friction often associated with high-security environments.

Requirements

Compliance First Mindset: Candidate must understand that in GCC-High, standard IT shortcuts don't exist. We must follow the STIGs and documentation to the letter.
Purview Power User: Expertise in data loss prevention (DLP) and sensitivity labeling is critical.
SharePoint Architect: Ability to design a library structure that is intuitive for a small team but rigid enough for a federal auditor.
Toolbox: Experience with Microsoft Entra ID (formerly Azure AD), Defender, and basic CMS management (e.g., WordPress).
Bachelor's degree in Cybersecurity, Information Technology, or a related field OR equivalent military/professional experience (typically 4+ years of direct technical experience in a regulated environment).
Deep understanding of NIST 800-171 and CMMC 2.0 requirements.
Relevant Certifications: CompTIA Security+, CySA+, or Microsoft SC-300/SC-400.

Responsibilities

CMMC Maintenance & Audit Readiness: Serve as the primary C-compliance manager. You will manage the System Security Plan (SSP), maintain the Plan of Action and Milestones (POA&M), and ensure we are 100% ready for a CMMC Level 2 assessment at any time.
GCC-High Tenant Governance: Advanced administration of our secure environment. This includes managing Conditional Access policies, Intune device compliance, and Microsoft Purview (Information Protection/Sensitivity Labels) to ensure controlled unclassified information (CUI) is handled correctly.
SharePoint & Workflow Optimization: Transition our team from email-centric work to structured SharePoint collaboration. You will build and manage sites, permissions, and automated workflows (Power Automate) that respect CUI boundaries.
Security Monitoring: Proactively monitor Microsoft Defender for Endpoint and Identity, investigating alerts and conducting regular vulnerability scans.
Web & Corporate Project Work: Act as the webmaster for our public-facing site (basic updates, security patching) and lead internal IT projects such as implementing hardware tokens (YubiKeys) or encrypted backup solutions. Also, support corporate project work.
User Enablement: Train our employees on secure habits, such as how to properly label documents and use encrypted communication channels.
Asset Lifecycle Management: Oversee the full lifecycle of company hardware, including the procurement, inventory tracking, and maintenance of computers, mobile devices, and peripherals.
Technical Onboarding: Lead the deployment and configuration of workstations for new hires, ensuring all essential hardware (monitors, printers, phones) and software are functional for Day 1 readiness.
Inventory Optimization: Maintain a detailed and accurate asset registry to monitor hardware health, manage warranty status, and plan for necessary hardware refreshes.
Cross-Functional Technical Support: Serve as the primary point of contact for all daily IT inquiries, providing rapid troubleshooting for hardware, software, and connectivity issues.
Infrastructure Maintenance: Manage and support essential office equipment, including printers, networking hardware, and communication tools, to minimize organizational downtime.
Process Improvement: Identify recurring technical issues and document standard operating procedures (SOPs) to streamline day-to-day IT workflows and user self-service.
Other duties as assigned.