Manager, Cybersecurity & Compliance Advisory & Managed Services

Regulatory & Framework Assessments

• Perform cybersecurity and compliance assessments aligned with frameworks and standards such as:
  • NIST CSF / NIST 800-53
  • FedRAMP / GovRAMP / FISMA / CMMC
  • ISO/IEC 27001
  • HIPAA / HITRUST
  • SOC 2 / SSAE 18
  • PCI DSS
  • GDPR / CCPA / Other data privacy regulations
• Analyze existing security controls and compliance measures, document findings, risks, and recommended actions.
• Prepare and deliver client-facing reports and presentations summarizing assessment outcomes and strategic recommendations.

Cybersecurity & Compliance Program Oversight

• Support the development, implementation, and maintenance of client cybersecurity and compliance programs.
• Guide clients through readiness activities for audits and certifications, helping ensure ongoing compliance with applicable regulations and standards.
• Monitor regulatory changes and industry developments, advising clients on necessary updates to their policies, procedures, and control environments.
• Assist in the development of security governance documentation, risk registers, and compliance monitoring plans.

Client Engagement & Delivery Management

• Serve as the day-to-day point of contact for client engagements, ensuring timely, high-quality service delivery.
• Collaborate with cross-functional teams, including technical staff and business stakeholders, to execute projects and support client objectives.
• Lead or support the delivery of managed compliance services, such as control monitoring, evidence management, and policy lifecycle support.
• Mentor and guide junior team members on assessment methods, client communication, and cybersecurity concepts.

Service Enhancement & Business Support

• Contribute to the continuous improvement of service delivery processes, templates, and methodologies.
• Develop reusable tools, documentation, and frameworks to streamline client work and promote consistency.
• Participate in scoping, proposal development, and other business development activities when needed.

• Bachelor s degree in Cybersecurity, Information Systems, or a related field (Master s degree preferred).

• 5 10 years of experience in cybersecurity, compliance, or risk advisory, including direct experience with audits, assessments and program management.

• Experience with FedRAMP and CMMC compliance engagements, including assessment of readiness, control validation, documentation review, and client advisory support across federal and defense-aligned frameworks.
• Strong working knowledge of cybersecurity and data privacy regulations, frameworks, and best practices.
• Proven ability to manage projects, communicate with clients effectively, and deliver actionable insights and recommendations.
• Excellent writing, presentation, and interpersonal skills.

• Either actively hold, or willingness to pursue relevant additional professional certifications (e.g., CISA, CISM, CISSP, ISO 27000 LA, PCI QSA, HITRUST CCSFP, CCP, CCA, etc.)

• Working knowledge of multiple cybersecurity frameworks, application controls, and software development life cycle and methodologies
• Demonstrated consistency in cultural values, principles, and work ethic
• Ability to lift and move up to 15 pounds
• Ability to sit for prolonged periods of time.
• Ability to stand, walk, bend, or reach as necessary for job tasks.
• Ability to use hands/fingers for typing, writing, or handling materials.