Cybersecurity and Compliance Manager

This is a fully remote position, open to applicants in Alabama, +46 more states.

📋 Description

• Spearhead cybersecurity compliance projects, which encompass risk assessments, policy formulation, audit readiness, evidence gathering, and continuous compliance oversight.

• Execute compliance gap evaluations, framework crosswalk analyses, maturity assessments, and remediation tracking.

• Supervise the Security Program Platform along with governance, risk, and compliance operations.

• Administer internal and client risk evaluations, cyber insurance inquiries and renewals, third-party risk management, and vendor security due diligence.

• Offer vCISO advisory services, focusing on security strategies, roadmaps, investment planning, and reporting for executives and boards.

• Advise clients and internal partners on responsible AI implementation, AI governance, acceptable-use policies, data protection, and emerging security threats.

• Maintain security policies, procedures, and documentation that is ready for audits.

• Oversee the delivery of Cybersecurity Services to ensure compliance with contractual security obligations.

• Identify relevant cybersecurity deliverables across service tiers based on client specifications, endpoint counts, compliance requirements, and risk profiles.

• Guarantee the consistent provision of Cyber Posture Snapshots, Continuous Health Checks, managed remediation, NIST CSF maturity scoring, and annual security reports.

• Lead strategic meetings with executive clients and serve as the escalation point for intricate cybersecurity, compliance, and risk issues.

• Relay security findings, business risks, remediation priorities, and strategic recommendations to both technical and non-technical stakeholders.

• Collaborate with security operations teams on incident response, vulnerability management, and remediation efforts.

• Assist in pre-sales activities, recommendations for cybersecurity services, and opportunities to enhance client security programs.

• Oversee annual backup recovery testing and provide guidance on business continuity and disaster recovery.

• Act as the primary liaison between Cyber74 and Kinetix regarding cybersecurity and compliance advice.

• Offer mentorship, coaching, and potential direct leadership to Security & Compliance Analysts and Security Success Analysts.

⛳️ Requirements

• A minimum of 8 years of experience in information technology, cybersecurity, information security governance, risk management, or regulatory compliance.

• A valid CISSP certification in good standing.

• Comprehensive knowledge of NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, CMMC, and ISO 27001.

• Proven experience in supporting audits, managing evidence, and conducting compliance evaluations.

• Experience in performing cybersecurity risk assessments.

• Background in managing third-party and vendor risks.

• Experience in supporting cyber insurance assessments.

• Familiarity with GRC or compliance automation platforms.

• Capability to advise executive stakeholders, handle multiple engagements, and assess security controls across Windows, macOS, cloud, networking, and identity environments.

• Additional certifications such as CISM or CISA are preferred.

• Previous leadership experience is preferred.

• Experience in MSP, MSSP, or consulting roles delivering vCISO or cybersecurity advisory services is preferred.

• Experience with security operations, incident response, vulnerability management, SIEM platforms, and endpoint security technologies is preferred.

• Familiarity with tools like CrowdStrike, ThreatLocker, Cisco Secure Connect, Cisco Meraki, OpenDNS, Jamf MDM, Microsoft Intune, Azure, OneLogin, and Okta is preferred.

• Experience with AI governance, security policies, and emerging AI-related risks is preferred.

• A Bachelor's degree in Information Security, Information Technology, or a related field, or equivalent professional experience.

🏝️ Benefits

• Opportunities for growth and learning.

• Comprehensive employee benefits.

• Innovation opportunities within the company.

• Commitment to inclusive hiring practices.

• Career advancement paths for a variety of role types.