Yes you have it basically correct. Isp modem goes in bridge mode and you run your own router with the wan set for one of the static IPs and setup like normal. All client access will be the same as if they are off site since their network will be totally seperate.

Just to clarify, i hope the IT person is running his own router and not relying on the Comcast pos.