Manager, Compliance Advisory

Accountabilities

• Oversee cybersecurity advisory engagements, mentor consultants, and ensure successful delivery of compliance and security assessment projects.
• Balancing technical execution, client engagement, team leadership, and strategic contributions to strengthen consulting capabilities.
• Lead and support cybersecurity compliance advisory engagements throughout planning, execution, review, and completion phases.
• Manage and mentor consultants by providing coaching, feedback, professional development support, and guidance on consulting methodologies.
• Oversee project delivery quality, timelines, utilization, margins, and adherence to established assessment processes.
• Build and maintain strong client relationships by providing trusted guidance throughout engagement lifecycles.
• Conduct and oversee compliance assessments aligned with frameworks including FedRAMP, CMMC, DISA Cloud SRG, FISMA, NIST, and other applicable security standards.
• Review, develop, and maintain security documentation, including policies, procedures, risk assessments, control documentation, and supporting evidence.
• Perform interviews, testing activities, and control validation procedures to assess security implementation effectiveness.
• Provide cybersecurity advisory support for cloud-based and traditional on-premises environments.
• Conduct quality reviews of project deliverables to ensure accuracy, completeness, and compliance with framework requirements.
• Collaborate with sales, delivery, and quality teams to identify opportunities, resolve challenges, and improve client outcomes.
• Support resource planning, workload management, and team performance initiatives.
• Stay current with evolving cybersecurity threats, regulations, and industry best practices while contributing to internal training and process improvements.

Requirements

• Extensive cybersecurity consulting experience, strong knowledge of compliance frameworks, and proven leadership capabilities.
• Experience performing compliance assessments within cloud environments, including hyperscale cloud service provider environments.
• Demonstrated ability to conduct multi-framework compliance assessments and interpret complex security requirements.
• Strong understanding of cybersecurity technologies including network security, application security, firewalls, identity and access management, and data protection.
• Experience with cloud technologies, virtualization, client-server architectures, and enterprise IT environments.
• Ability to lead consulting engagements independently and manage multiple priorities effectively.
• Experience mentoring team members and supporting professional growth within technical consulting teams.
• Strong understanding of security control families, artifact collection processes, and client interview methodologies.
• Ability to interpret firewall rules, analyze network architectures, and create network, boundary, and data flow diagrams.
• Excellent written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders.
• Strong consulting, problem-solving, analytical, organizational, and decision-making skills.
• Ability to build trusted relationships with clients and internal stakeholders.
• Strong proficiency with Microsoft Excel, including advanced formulas and reporting capabilities.
• Bachelor’s degree or equivalent combination of education and experience.
• At least one advanced cybersecurity or cloud certification such as CISSP, CISA, CISM, CAP, CRISC, CMMC CCP, AWS, Azure, or GCP security certification.
• PREFERRED: Experience with container-based architectures and multiple cloud platforms.

Benefits

• Flexible work model with options to work remotely or from an office environment.
• Competitive compensation package.
• Comprehensive health, dental, and vision insurance options.
• Paid parental leave and flexible time-off programs.
• Certification reimbursement and professional development opportunities.
• Digital mental health and wellbeing support resources.
• Opportunities to participate in employee resource groups and company community initiatives.
• Opportunity to work on complex cybersecurity challenges with leading organizations.