IT Infrastructure Compliance Engineer

Key Responsibilities

Plan, lead, and execute IT and security audits covering infrastructure, enterprise applications (including MES, PLM, and ERP/SAP), and supply chain B2B integrations.

Evaluate the IT risk and security posture of external partners, assessing compliance with security standards, data protection protocols, and intellectual property safeguards.

Serve as a primary on-site IT point of contact for regional stakeholders, coordinating with remote and global IT teams across networking, storage, and application domains; manage urgent escalations with third-party IT vendors on connectivity, servers, and production systems.

Audit network segmentation, access controls, APIs, and data transmission protocols supporting automated data exchange between internal systems and external facilities.

Evaluate IT environments against industry frameworks (e.g., ISO 27001, SOX) to ensure data privacy, financial integrity, and regulatory compliance.

Assess the accuracy and completeness of operational data and metrics flowing from partner systems into internal data warehouses, using data analytics tools to identify anomalies or control gaps.

Draft clear, actionable audit reports for leadership and track remediation efforts to ensure identified risks are effectively resolved.

Required Qualifications

Bachelor's degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience).

8+ years of experience in IT Audit, IT Security, IT Infrastructure, or Technology Risk Management.

Strong hands-on infrastructure expertise, including Windows/Unix server administration, virtualization, and enterprise storage systems.

Solid network audit expertise, including TCP/IP routing, firewall policy configuration, and core protocols (DNS, DHCP, HTTPS, SSH) to independently verify system security and compliance controls.

Familiarity with cloud security (AWS/Azure) and identity and access management (IAM).

Exceptional verbal and written communication skills, with the ability to translate complex technical risk into terms both technical and non-technical stakeholders can act on.

Ability to travel domestically and internationally (up to 15–20%) to support on-site partner assessments as needed.

Preferred Qualifications

Experience in IT audit, security, or risk management within high-tech or manufacturing environments.

Domain knowledge of automated manufacturing environments, supply chain logistics, and B2B integration technologies (e.g., EDI, APIs, SFTP).

Familiarity with Shop Floor Control and Manufacturing Execution Systems (MES).

Professional certification such as CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional).

Hands-on experience with data analytics and visualization tools (e.g., SQL, Python, Tableau, or Power BI) to automate audit testing.

Experience auditing intellectual property (IP) protection controls in a collaborative engineering or manufacturing environment.

Proven ability to drive and coordinate third-party IT teams remotely; energetic, proactive, and comfortable communicating with both IT and non-IT personnel.

Tools & Technologies

Manufacturing Execution Systems (MES) and Product Lifecycle Management (PLM) platforms

Enterprise Resource Planning (ERP) systems, including SAP

AWS / Azure cloud platforms

Identity and Access Management (IAM) tools

SQL, Python, Tableau, Power BI

EDI, APIs, SFTP for B2B data exchange

Networking protocols: TCP/IP, DNS, DHCP, HTTPS, SSH

Compliance frameworks: ISO 27001, SOX