Senior Compliance Administrator

Data-Mail, Inc.•Newington, CT

9d•Onsite

About The Position

The Senior Compliance Administrator is responsible for owning and managing the company’s security and compliance processes end-to-end, including audit coordination, certification readiness, and execution of compliance-related initiatives. This role serves as the central point of accountability for audit calendars, evidence collection, remediation tracking, and internal coordination across security and technology teams. The position ensures that all audit and compliance activities—such as SOC 2, PCI, and client assessments—are executed in a timely, organized, and consistent manner. The Senior Compliance Administrator works closely with IT, operational teams, and external auditors to maintain readiness, drive completion of required activities, and ensure visibility into compliance status across the organization.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Business, or related field (or equivalent experience)
4–7 years of experience in IT, audit coordination, compliance, or project/program management with a security focus
Experience supporting or managing audits such as SOC 2, PCI, or similar frameworks
Experience with Splunk, TenableSC, or other similar frameworks for alerting and vulnerability remediation
Strong project management and organizational skills with the ability to manage multiple deadlines
Experience coordinating cross-functional teams and driving tasks to completion
Expertise with security concepts such as access control, patching, vulnerability management, and risk tracking
Strong documentation and communication skills (written and verbal)
Experience with reporting tools (Excel, Power BI, or similar) and task management platforms

Nice To Haves

Relevant certifications (e.g., CISA, CISSP, CRISC, Security+, or similar) are a plus

Responsibilities

Own and manage the full lifecycle of all audit and certification activities (SOC 2, PCI, client-driven audits)
Develop and maintain the enterprise audit calendar, ensuring all milestones and deadlines are clearly defined and met
Act as the primary coordinator and point of contact for internal teams and external auditors
Manage the collection, organization, and submission of audit evidence
Track and drive remediation of audit findings through to completion
Serve as the operational owner of the company’s compliance program, ensuring consistent execution of policies and controls
Coordinate and track all compliance-related initiatives across IT systems, infrastructure, and business processes
Maintain documentation for policies, procedures, and control evidence to support audit readiness
Ensure standardized processes and repeatability across audit cycles
Continually develop, modernize and perform company security awareness training and ongoing company visibility into new threat vectors.
Coordinate and execute penetration testing, phishing testing, and communicate results with ideas on improving the metrics.
Coordinate system patching cycles and security-related updates across internal technology teams
Track vulnerability remediation efforts, ensuring timely completion and proper documentation
Manage project timelines and dependencies for security-related initiatives
Provide visibility into status, risks, and delays associated with patching and compliance efforts
Lead the efforts for ongoing SIEM management. Monitor alerts, finetune and add new data points for constantly increased awareness.
Develop and maintain dashboards and reporting on audit readiness, remediation status, and compliance progress
Provide regular updates to management on upcoming audits, risks, and key milestones
Track and report on key operational metrics related to compliance and security execution
Lead monthly Security Committee meetings with key stakeholders across the enterprise.
Coordinate testing efforts such as disaster recovery and business continuity exercises
Support organization-wide security awareness and training coordination as needed