Compliance Administrator

Company Description TechR2 is a data security company specializing in total data eradication for retired drives and IT devices. The organization uses patented processes and a compliance-focused approach to help clients meet and exceed stringent data-security and environmental regulations, including GDPR and current and proposed U.S. standards. TechR2’s services span drive destruction, device degaussing, drive wiping, data center decommissioning, secure transport, and asset value recovery. Its flagship Tear-A-Byte solution for data centers ensures that failed or retired drives are fully tracked, contained, destroyed, and verified before leaving secure environments, providing chain of custody, certificates of destruction, and protection from regulatory fines. The company’s mission is to eliminate the risks associated with data-bearing devices and prevent large-scale data breaches through systematic, verifiable data eradication.

Position Summary

The TechR2 Compliance Administrator directs and runs the company’s compliance program. This includes maintaining and updating its management systems to align with contracts, agreements, laws, regulations, and standards the company follows. Meticulous document control and organization are vital for this role. The organization currently holds 7 ISO standards – ISO 27001, 9001, 42001, 14001, 45001, 31000, and 20243. It also audits to NIST 800-171, its inventory system is NIST 800-88 compliant, and its incident response program follows NIST 800-61.

The ability to read and interpret new standards is necessary to be successful in this role as the organization’s compliance requirements are always growing and changing to meet industry demands.

Primary Duties and Responsibilities:

• Ownership of the entire organization’s compliance program and all associated responsibilities.
• Management of the organization’s management systems and all associated documentation, including document control, running management review meetings, monitoring business objectives (KPIs), regular review of policies and procedures, running and reviewing risk assessments, ensuring third-party due diligence, etc.
• Internal Audits for all ISO standards, NIST guidelines, PCI-DSS, HIPPA, and answering all third-party verification requests and audits.
• Scheduling and running external audits as required.
• Coordinating incident response, corrective action reports, and opportunities for improvement.
• Ongoing assessment of BC/DR documentation and regularly coordinating related training exercises.
• Regular review of network monitoring system and all cybersecurity protective measures.
• Ownership of the organization’s ESG program, including ongoing development and refinement to meet client and industry needs.
• Understanding workplace safety and ensuring a physically safe environment.
• Regular communication with all levels of the organization, and the ability to properly communicate with technical and non-technical individuals.
• Ongoing cross-functional collaboration to ensure all business areas are compliant with all associated contracts, agreements, laws, regulations, and standards the company follows.

Qualifications:

• Self-motivated, ability to be successful without direct supervision.
• Excellent verbal and written communication skills to share information with co-workers and third parties.
• Ability to communicate with all levels of an organization, including technical and non-technical audiences.
• Pass screenings such as background, drug, and federal I-9 requirements.
• Highly organized & detail oriented.
• Good problem-solving skills.
• Growth mindset.
• Budget management experience.
• Knowledge of labor laws and regulations and the ability to learn new standards and regulations as required.
• English fluency to ensure optimal communication with all members of the organization.
• Any level of Spanish fluency would positively contribute to the success of this role.

Education:

• Bachelor’s degree or higher in information systems, Cybersecurity, GRC, Business Administration, Occupational Safety, or a related field; or an equivalent combination of education and experience.

Certifications:

• Preferred: CISM, CISSP, ISO 27001 Lead Auditor, ISO 9001 Lead Auditor, or related.

TechR2 is an Equal Opportunity Employer. Qualified applicants and employees are considered without regard to race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, ancestry, age, disability, genetic information, military status, veteran status, or any other status protected by federal, state, or local law.