Compliance · Remote — US eligible · 7+ years · Full-time

Write control-family evidence.
Make audits boring.

Document WUC's operating practices to NIST SP 800-53 and SP 800-171 control families for maintenance scope, prepare engagements for audit, and keep the evidence trail current as the practice grows. Compliance here is not a checkbox function — alignment language is a purchasing criterion for the clients who hire us, and your work is what makes it true.

What You’ll Run

The estates behind this role.

WUC Technologies is a managed IT services partner — sharpest in healthcare services, where the flagship workloads are Epic/EHR hosting and radiology on Dell PowerScale and NetApp AFF storage. Savings cases the practice builds are structural: the same models behind the infrastructure savings calculator.

  • Control-family mapping for maintenance and managed-operations scope under SP 800-53 and SP 800-171
  • CUI-adjacent engagements where documentation discipline decides eligibility
  • Audit preparation across federal, healthcare, and financial engagements
  • The evidence library behind the Trust Center's alignment statements
The Job

What you’ll own — and what it takes.

Responsibilities

  • Map operating practices to NIST SP 800-53 and SP 800-171 control families, and keep the mapping current
  • Author and maintain audit-ready evidence for engagement-level reviews
  • Prepare practice teams for client audits and third-party assessments
  • Review new engagement scopes for compliance surface before signature
  • Keep alignment language honest: what we claim is what the evidence shows
  • Advise practice leads on control implications of operational changes

Requirements

  • 7+ years in IT compliance, audit, or security documentation roles
  • Working command of NIST SP 800-53 and SP 800-171 control families
  • Experience in CUI-adjacent engagements and their handling requirements
  • Audit-preparation experience on the being-audited side of the table
  • Writing that assessors accept the first time
  • US work eligibility

Nice to have

  • FedRAMP, CMMC, or FISMA program exposure
  • HIPAA or PCI-DSS mapping experience alongside the NIST families
  • Prior work at a service provider rather than an end-user shop

The hiring process is four steps with documented entry criteria — application (response inside 5 business days), a 45-minute practice conversation, a field interview, and a transparent offer. The compliance practice documents operating work to NIST SP 800-53 and guidance from CISA. WUC Technologies is an equal opportunity employer.

Apply

Apply for NIST Compliance Specialist

A resume link and a short paragraph on what you’d want to be working on — that’s the whole application. It transmits over HTTPS directly to our hiring inbox and is not stored on this site.

Transmitted over HTTPS to our hiring inbox. Not stored on this site. No file uploads — link your resume instead.

Not this role, but this company?

A short note on what you’d want to own here reaches a practice lead, not a resume screener.

Get a Custom Solution