IT & Cybersecurity Compliance Specialist

🔥 15 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Pearl

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

☁️ SaaS

🤝 B2B

💰 $58M Series B - Pearl on 2024-07

SaaS • B2B

Pearl is a front-end web UI/design toolkit or website template provider. The supplied CSS and class names indicate Pearl maintains a comprehensive design system or set of UI components (navigation, FAQ dropdowns, modals, carousels, responsive containers, accessibility focus states, and testimonial blocks) intended to make marketing and product sites look and behave consistently across browsers and viewports. The materials suggest Pearl offers reusable styles and UX patterns for building or theming websites, though the provided snippet alone does not specify whether Pearl is a template marketplace, design system product, agency, or SaaS platform.

📋 Description

• Administer and maintain core IT systems including endpoint management, identity and access management (IAM), and SaaS tooling such as Google Workspace, Slack, and Notion • Manage employee onboarding and offboarding, including provisioning and deprovisioning accounts, hardware, and system access • Maintain and enforce IT access controls, role-based permissions, and least privilege across systems • Serve as the first point of escalation for internal IT support requests and tickets, triaging and resolving technical issues • Manage the company device fleet, including MDM enrollment, patching, and compliance monitoring • Administer and monitor cloud infrastructure and SaaS platform configurations for security and availability • Maintain IT asset inventory and manage software licensing • Conduct compliance gap assessments for SOC 2, HIPAA, GDPR, and related regulations • Develop, write, and revise security and privacy SOPs • Implement and monitor security KPIs • Assess, document, and report security breaches or incidents • Perform security assessments of new and existing suppliers, including annual reviews • Conduct information security incident reviews and recommend corrective actions • Manage security and privacy CAPAs • Prepare for and manage security and privacy audits • Complete security questionnaires for clients, vendors, and partners • Monitor evolving security and privacy regulations and update policies and procedures • Administer Vanta or an equivalent GRC tool for compliance monitoring and evidence collection • Oversee security and privacy training programs • Design and execute phishing simulation campaigns and related training • Host recurring security committee meetings and management reviews

🎯 Requirements

• 3+ years of experience in IT administration, systems management, or a combined IT/security role • 3+ years of experience implementing and maintaining SOC 2 certification • 3+ years of experience with HIPAA, GDPR, and other global privacy frameworks • Proven track record of managing compliance programs, including audits, risk assessments, and CAPAs • Hands-on experience with compliance tools such as Vanta or similar platforms • Demonstrated experience with endpoint management, IAM platforms, MDM solutions, and SaaS administration • Strong understanding of cybersecurity best practices, incident response, and supplier risk management • Excellent written and verbal communication skills, with the ability to translate complex requirements into actionable processes • Ability to work independently and collaboratively in a fast-paced environment • Relevant certifications (e.g., CISA, CISM, CISSP, CompTIA Security+, or equivalent) are a plus • Experience in a SaaS company is strongly preferred • Experience in a medical device company and/or supporting FDA submissions • Experience with ISO 27001, ISO 27701, CCPA, or other international security/privacy frameworks • Background in managing phishing simulation programs and employee training initiatives • Familiarity with SaaS-specific compliance challenges and customer-facing security requirements • Experience with Google Workspace administration and IT helpdesk/ticketing workflows • Comfort operating as a one-person or small-team IT function in a high-growth environment

🏖️ Benefits

• Competitive Benefit and Compensation Offerings • Ongoing Training and Development Opportunities • Unaccrued, Flexible PTO • Remote Work