IT Compliance/Cyber Security Administrator

Job Description

Job Description

We are looking for a Cyber Security Engineer to strengthen privacy, security, and regulatory compliance efforts for our organization in Derby, Connecticut. This role partners with leadership, legal counsel, and operational teams to maintain effective safeguards, support audit readiness, and improve awareness of privacy and information security obligations. The ideal candidate will help translate regulatory expectations into practical policies, training, monitoring, and incident response activities that protect organizational data and systems.

Responsibilities:

• Partner with leadership, legal counsel, and internal stakeholders to maintain privacy documentation, consent materials, and information notices that align with current regulatory expectations and organizational practices.

• Manage a formal process for handling privacy-related concerns by logging, reviewing, investigating, and coordinating resolution of complaints with the appropriate teams.

• Lead organization-wide awareness efforts that strengthen understanding of privacy responsibilities and reinforce consistent handling of confidential information.

• Work closely with privacy and security leadership to align safeguards, written standards, and employee education programs across both compliance areas.

• Support internal and external reviews related to state and federal privacy requirements, including preparation for audits and responses to accrediting or regulatory inquiries.

• Help develop, update, and monitor security policies, procedures, and guidelines covering risk management, network protection, asset security, physical safeguards, disaster recovery, and third-party oversight.

• Administer user access documentation and perform periodic reviews to confirm permissions remain appropriate when roles or employment status change.

• Coordinate the investigation, response, and remediation of security events with legal counsel, vendors, and privacy stakeholders in accordance with incident response procedures.

• Oversee external service providers performing technical maintenance and verify their security practices meet organizational standards and contractual expectations.

• Prepare and deliver periodic management reporting on privacy, security, and compliance trends, key issues, and program effectiveness over the prior year.

• Experience supporting information privacy, cybersecurity, risk, or compliance programs within a regulated environment.
• Working knowledge of compliance risk management principles and the ability to interpret privacy and security requirements in practice.
• Hands-on familiarity with security monitoring or log analysis tools such as Splunk.
• Experience conducting vulnerability scanning activities and coordinating follow-up remediation efforts.
• Ability to draft, maintain, and organize policies, procedures, access records, and compliance documentation with accuracy.
• Strong collaboration skills for working with legal counsel, leadership, auditors, vendors, and cross-functional teams.
• Ability to communicate clearly through training, reporting, and incident-related updates to both technical and non-technical audiences.