Strong fit for technical professionals with compliance and documentation experience who can align with NIST frameworks and manage multiple projects, working in a northeast-based IT consulting environment.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from Custom Computer Specialists via Greenhouse
We are a growing IT company; a great place to start and grow your career!
CCS is a leading technology consulting firm providing best in class solutions to our clients for over 45 years. Expressed simply in our tagline – Right People, Right Results, Right Careers! Our philosophy is, in fact, an obsession that drives our behavior, our culture and our work. It’s why we put tremendous emphasis on hiring individuals that embody the principles that align with our obsession. We continue to successfully provide network integration, support services, products solutions, and applications services to our valued clients in the northeast. Our focus is simple...our goal is to make technology easy and to help our clients use it as effectively as possible.
Custom Computer Specialists is looking for a motivated technical professional to join our team as an IT Compliance & Documentation Specialist who writes and maintains policies, plans, and procedures that keep our clients secure, compliant, and ready for the unexpected. You will turn technical practice into clear documentation aligned with the NIST Cybersecurity Framework, and help roll out the processes behind it, from multifactor authentication to user audits.
Salary: $65,000.00 – 74,500.00
What You'll Do:
Documentation
Create, maintain, and review core security and IT governance documents, including:
NIST documentation: map controls and practices to the NIST Cybersecurity Framework (and NIST SP 800-53 / 800-171 where required) and track gaps
Protocol and process documentation: standard operating procedures, runbooks, and how-to guides for technical staff
Acceptable Use Policies: define acceptable use of systems, networks, devices, and data
Disaster recovery planning: backup, restoration, and business continuity plans with defined recovery time and recovery point objectives
Incident Response Plan: roles, escalation paths, communication templates, and post-incident review steps
Safety Plan: physical and digital safety procedures, coordinated with facilities and leadership
Password Policies: complexity, rotation, storage, and password manager standards
Chromebook Policies: device management, usage, assignment, repair, and return procedures
Onboarding / Offboarding policies: account provisioning, access grants, equipment issue, and timely deprovisioning
Process development
Software, user, and responsibility charts: build and maintain software inventories, user/role matrices, and RACI charts
Multifactor deployment: plan, document, and support MFA rollouts, including user communication and training materials
User auditing: run recurring access reviews, identify stale or excess permissions, and report findings
Project management and scope definitions: write project scopes, track milestones, and coordinate with technical staff and stakeholders
Perform other job-related duties as assigned
Ongoing
Review and update documents on a set schedule, at least annually or after major changes
Keep documentation organized, version-controlled, and easy to find
Support audits, assessments, and compliance reviews with evidence and records
What success looks like:
Coverage: share of required policies and plans that exist, are approved, and were reviewed in the last 12 months (target: 100%)
MFA adoption: share of accounts with MFA enforced (target: 95%+, with documented exceptions)
Audit timeliness: user access reviews finished on schedule, with stale accounts removed within 5 business days of being found
Offboarding speed: access removed for departing users within 24 hours
Project delivery: documented scopes finished on time and within scope
Usability: staff and clients can find and follow the documents without needing to escalate
What You'll Bring:
2+ years in IT, IT compliance, security, or technical writing
Working knowledge of the NIST Cybersecurity Framework and common security controls
Experience writing policies, procedures, or technical documentation for non-technical readers
Familiarity with identity and access management, including MFA and user provisioning
Experience with Microsoft 365 and/or Google Workspace administration concepts
Strong organization skills and the ability to manage several documents and projects at once
#IND
CCS Offers:
Competitive salaries
Comprehensive benefits including:
Medical and dental plans
Company paid vision and short and long term disability plans
Flexible spending programs including Healthcare, Dependent Care, Transit and Parking
401K with employer match
Tuition reimbursement
Onsite fitness center (or gym membership reimbursement for client or satellite based employees)
Company paid life Insurance
Paid holidays and vacation
Technical certification gift card rewards program
Come experience our unique culture and see how our “right people, right results” philosophy has led to our outstanding success! We are great place to start your IT career!
EEO Statement:
Custom Computer Specialists is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. To request a reasonable accommodation to apply for this position or to enable qualified individuals with disabilities to perform essential job functions, contact humanresources@customonline.com or 631-864-6699.