We are a growing IT company; a great place to start and grow your career!

CCS is a leading technology consulting firm providing best in class solutions to our clients for over 45 years. Expressed simply in our tagline – Right People, Right Results, Right Careers! Our philosophy is, in fact, an obsession that drives our behavior, our culture and our work. It’s why we put tremendous emphasis on hiring individuals that embody the principles that align with our obsession. We continue to successfully provide network integration, support services, products solutions, and applications services to our valued clients in the northeast. Our focus is simple...our goal is to make technology easy and to help our clients use it as effectively as possible.

CCS is looking for a motivated technical professional to join our team as an IT Compliance & Documentation Specialist who writes and maintains policies, plans, and procedures that keep our clients secure, compliant, and ready for the unexpected. You will turn technical practice into clear documentation aligned with the NIST Cybersecurity Framework, and help roll out the processes behind it, from multifactor authentication to user audits.

Salary: $65,000.00 – 74,500.00

What You'll Do

Documentation

Create, maintain, and review core security and IT governance documents, including:

NIST documentation: map controls and practices to the NIST Cybersecurity Framework (and NIST SP 800-53 / 800-171 where required) and track gaps
Protocol and process documentation: standard operating procedures, runbooks, and how-to guides for technical staff
Acceptable Use Policies: define acceptable use of systems, networks, devices, and data
Disaster recovery planning: backup, restoration, and business continuity plans with defined recovery time and recovery point objectives
Incident Response Plan: roles, escalation paths, communication templates, and post-incident review steps
Safety Plan: physical and digital safety procedures, coordinated with facilities and leadership
Password Policies: complexity, rotation, storage, and password manager standards
Chromebook Policies: device management, usage, assignment, repair, and return procedures
Onboarding / Offboarding policies: account provisioning, access grants, equipment issue, and timely deprovisioning

Process development

Software, user, and responsibility charts: build and maintain software inventories, user/role matrices, and RACI charts
Multifactor deployment: plan, document, and support MFA rollouts, including user communication and training materials
User auditing: run recurring access reviews, identify stale or excess permissions, and report findings
Project management and scope definitions: write project scopes, track milestones, and coordinate with technical staff and stakeholders
Perform other job-related duties as assigned

Ongoing

Review and update documents on a set schedule, at least annually or after major changes
Keep documentation organized, version-controlled, and easy to find
Support audits, assessments, and compliance reviews with evidence and records

What success looks like

Coverage: share of required policies and plans that exist, are approved, and were reviewed in the last 12 months (target: 100%)
MFA adoption: share of accounts with MFA enforced (target: 95%+, with documented exceptions)
Audit timeliness: user access reviews finished on schedule, with stale accounts removed within 5 business days of being found
Offboarding speed: access removed for departing users within 24 hours
Project delivery: documented scopes finished on time and within scope
Usability: staff and clients can find and follow the documents without needing to escalate

What You'll Bring

2+ years in IT, IT compliance, security, or technical writing
Working knowledge of the NIST Cybersecurity Framework and common security controls
Experience writing policies, procedures, or technical documentation for non-technical readers
Familiarity with identity and access management, including MFA and user provisioning
Experience with Microsoft 365 and/or Google Workspace administration concepts