IT Infrastructure Compliance Engineer

Role Summary
This position involves leading and executing comprehensive IT and security audits across various infrastructure components, enterprise applications, and supply chain integrations. It requires assessing the security posture and compliance of internal systems and external partners, ensuring adherence to industry standards and regulatory frameworks. The role also entails acting as a primary on-site IT contact for regional stakeholders and coordinating with global IT teams to address urgent issues.

Responsibilities

• plan, execute, and lead IT and security audits covering infrastructure, enterprise applications (including MES, PLM, and ERP/SAP), and supply chain B2B integrations
• evaluate external partners’ IT risk and security compliance, including data protection protocols and intellectual property safeguards
• serve as the main on-site IT point of contact for regional stakeholders, managing coordination with remote and global IT teams on networking, storage, and application issues
• manage escalations with third-party IT vendors related to connectivity, servers, and production systems
• audit network segmentation, access controls, APIs, and data transmission protocols for automated internal and external system data exchanges
• assess IT environments against industry frameworks such as ISO 27001 and SOX to verify data privacy, financial integrity, and compliance
• evaluate operational data accuracy and completeness from partner systems using data analytics tools, identifying anomalies or control gaps
• produce clear, actionable audit reports for leadership, tracking remediation efforts to address identified risks
• review and verify system security controls, including firewall policies, TCP/IP routing, and core protocols (DNS, DHCP, HTTPS, SSH)
• support continuous improvement initiatives for IT security and risk management processes

Qualifications

• bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience)
• minimum of 8 years’ experience in IT Audit, IT Security, IT Infrastructure, or Technology Risk Management
• hands-on expertise in Windows/Unix server administration, virtualization, and enterprise storage systems
• strong knowledge of network security, including TCP/IP routing, firewall policies, DNS, DHCP, HTTPS, SSH
• familiarity with cloud security platforms, particularly AWS and Azure, and identity and access management tools
• excellent verbal and written communication skills, capable of translating complex risk assessments for diverse audiences
• ability to travel domestically and internationally (up to 20%) for on-site assessments as needed

Publishing Pay Range: $60.00 - $65.00 hourly
This position is based in office and requires employee to work on-site.