Cybersecurity Compliance Program Manager
Core
Own the company's cybersecurity compliance portfolio (CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR) by translating requirements into practical controls and personally creating/improving processes, policies, and evidence for audit readiness.
Role type
Senior IC cybersecurity compliance program manager
Builds
Compliance operating system, control narratives, SSP content, automated evidence workflows, and remediation plans
Domain
Cybersecurity compliance, defense contracting, industrial manufacturing
Required skills
CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, control design and testing, secure configuration, SIEM use cases, script development, third-party risk management, cross-functional leadership
Preferred skills
GRC tools, compliance automation, harmonizing multiple frameworks, manufacturing/OT experience
Technologies
Microsoft 365, Linux, Windows, Active Directory, cloud, SIEM, vulnerability management tools
Responsibilities
Lead audits and reviews to assess controls and document gaps; Design and operationalize technical controls across endpoints, servers, networks, and identity; Manage third-party obligations and supplier compliance; Report readiness metrics and risk to executives
Seniority
Senior, hands-on IC