Cybersecurity and Compliance Manager

Role overview Lead cybersecurity governance, risk, and compliance work for client organizations, helping them meet regulatory and contractual obligations while improving security maturity. The role combines framework-based assessments, audit and remediation oversight, executive advisory work, and leadership across a client-facing security services team.

Responsibilities - Direct compliance programs across frameworks such as NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001, including assessments, policies, audit preparation, evidence collection, and ongoing monitoring. - Identify control gaps, map requirements across frameworks, assess maturity, and track remediation through completion. - Manage internal and client risk reviews, cyber insurance questionnaires, third-party assessments, and vendor due diligence. - Advise clients as a virtual security leader by developing security strategies, roadmaps, investment plans, and executive or board-level risk reports. - Guide responsible AI governance, including acceptable-use policies, data protection, and emerging security concerns. - Oversee service delivery and security commitments; coordinate with security operations on incidents, vulnerabilities, remediation, and client communications.

Requirements - Deep experience in cybersecurity governance, risk, and compliance, including work across multiple security frameworks. - Ability to lead client-facing advisory engagements and communicate technical risks and remediation priorities to executive and technical audiences. - Practical knowledge of security assessments, audit evidence, policy maintenance, and remediation tracking. - Ability to coordinate security operations, compliance stakeholders, and client teams to meet agreed obligations. - Strong leadership and coaching skills for guiding analysts and supporting consistent service delivery.

Benefits and work setup This is a remote role based in the United States. Compensation is expected to start at $120,000; the offer may vary based on experience and expertise.