Cybersecurity Risk and Compliance Manager

Responsibilities

• Lead the organization's cybersecurity strategy, governance, and risk management program
• Manage all CMMC readiness, implementation, certification, and continuous compliance activities
• Develop and maintain policies, procedures, and security controls aligned with NIST SP 800-171, CMMC, and other applicable regulatory requirements
• Oversee protection of Controlled Unclassified Information (CUI) and other sensitive company information
• Conduct cybersecurity risk assessments and prioritize remediation efforts
• Coordinate internal and external security audits, assessments, and customer cybersecurity requirements
• Manage incident response planning, investigation, reporting, and recovery activities
• Monitor cybersecurity threats and implement appropriate defensive measures
• Collaborate with IT leadership to ensure secure network architecture, endpoint protection, identity management, and cloud security
• Manage relationships with Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), consultants, and third-party assessors
• Report cybersecurity risks, compliance status, and key performance metrics to executive leadership
• Develop security budgets and recommend technology investments that support business objectives

Requirements

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience)
• 3+ years of cybersecurity experience and/or experience in an information security role
• Demonstrated experience implementing NIST SP 800-171 security controls
• Experience leading CMMC preparation, assessments, or certification initiatives
• Strong knowledge of risk management frameworks and cybersecurity governance
• Experience developing security policies, standards, and procedures
• Excellent communication and leadership skills with the ability to work across all levels of the organization
• Applicant must be a U.S. Person
• Must be able and willing to obtain and maintain a U.S. security clearance if one is not currently held

Company Profile