Compliance Administrator

Overview

This role supports compliance and audit readiness year-round, with ownership of day-to-day work behind SOC reporting, PII and data privacy controls, NetSuite access governance, and IT general controls (ITGC). Responsibilities include collecting evidence, tracking requests, and ensuring controls operate as documented.

This is a 100% remote role.

Salary Range: $70,000 - $80,000 + Discretionary Bonus + Benefits

Responsibilities

SOC Compliance (SOC 1 / SOC 2)

• Coordinate SOC audit readiness and the annual audit cycle with control owners and external auditors
• Maintain the control matrix, narratives, and system descriptions as processes and systems change
• Monitor control testing, log exceptions, and track remediation to closure
• Collect and review vendor SOC reports, documenting CUECs and exceptions

PII and Data Privacy

• Maintain the inventory of systems that store or process PII
• Support data classification, retention, and disposal in line with policy and regulations
• Track privacy requests, incidents, and corrective actions through resolution

NetSuite Access Governance

• Run periodic access reviews of NetSuite and PII-bearing systems: collect manager sign-offs and document results
• Monitor SoD conflicts, stale or excessive access, and privileged accounts, and drive them to resolution
• Verify joiner, mover, and leaver changes were approved and completed on time

ITGC Requests and Evidence

• Create, assign, and track auditor and ITGC requests (PBC) across access, change management, backup and recovery, and IT operations
• Gather evidence (screenshots, reports, tickets, approvals, populations) and review for completeness, accuracy, and date range before submission
• Confirm role and permission changes have proper approval and documentation

Documentation and Reporting

• Maintain the central repository of policies, procedures, and audit artifacts, and update them on a regular schedule
• Report status on open requests, exceptions, and remediation to leadership
• Maintain the compliance calendar for recurring activities such as quarterly access reviews and annual policy reviews

Requirements

• 2+ years in compliance, internal audit, IT audit, or risk, with a bachelor’s degree in Accounting, Information Systems, or a related field (or equivalent experience)
• Working knowledge of SOC 1 / SOC 2, ITGC domains (access, change management, operations), and PII and data privacy basics
• Hands-on experience with roles, permissions, and user administration in NetSuite or a comparable ERP
• Ability to manage many requests and deadlines at once
• Comfortable working in Excel and tracking tools
• Clear writing skills and the ability to request evidence from non-technical teams

Preferred Qualifications

• None listed

Compensation & Benefits

• Salary Range: $70,000 - $80,000 + Discretionary Bonus + Benefits
• 401k
• Time off: vacation, sick days, holidays, parental, and bereavement leave
• Full medical, dental, and vision coverage, plus extra support when needed
• Wellness resources
• Opportunities for growth and internal promotion

Location

• 100% remote