[Hiring] Compliance Administrator @Quanta Services

Role Description

The Compliance Administrator at Ampacity keeps the company audit-ready year-round. You own the day-to-day work behind SOC reporting, PII and data privacy controls, NetSuite access governance, and IT general controls (ITGC): collecting evidence, tracking requests, and making sure controls operate as documented.

This is a 100% remote role.

Qualifications

• 2+ years in compliance, internal audit, IT audit, or risk
• Bachelor’s degree in Accounting, Information Systems, or a related field (or equivalent experience)
• Working knowledge of SOC 1 / SOC 2, ITGC domains (access, change management, operations), and PII and data privacy basics
• Hands-on with roles, permissions, and user administration in NetSuite or a comparable ERP
• Able to manage many requests and deadlines at once
• Comfortable working in Excel and tracking tools
• Clear writing, and the ability to ask non-technical teams for evidence without friction

Requirements

• Coordinate SOC audit readiness and the annual audit cycle with control owners and external auditors
• Maintain the control matrix, narratives, and system descriptions as processes and systems change
• Monitor control testing, log exceptions, and track remediation to closure
• Collect and review vendor SOC reports, documenting CUECs and exceptions
• Maintain the inventory of systems that store or process PII
• Support data classification, retention, and disposal in line with policy and regulations
• Track privacy requests, incidents, and corrective actions through resolution
• Run periodic access reviews of NetSuite and PII-bearing systems: collect manager sign-offs and document results
• Monitor SoD conflicts, stale or excessive access, and privileged accounts, and drive them to resolution
• Verify joiner, mover, and leaver changes were approved and completed on time
• Create, assign, and track auditor and ITGC requests (PBC) across access, change management, backup and recovery, and IT operations
• Gather evidence (screenshots, reports, tickets, approvals, populations) and check it for completeness, accuracy, and date range before submission
• Confirm role and permission changes have proper approval and documentation
• Maintain the central repository of policies, procedures, and audit artifacts, and update them on a regular schedule
• Report status on open requests, exceptions, and remediation to leadership
• Maintain the compliance calendar for recurring activities such as quarterly access reviews and annual policy reviews

Benefits

• Competitive pay and 401k — because your work should be rewarded fairly
• Time off you'll actually use: vacation, sick days, holidays, parental, and bereavement leave
• Full medical, dental, and vision coverage, plus extra support when you need it
• Wellness resources to help you show up as your best self, at work and at home
• Real room to grow — we promote from within and invest in your development