Cybersecurity Risk and Compliance Manager
On-siteSaint Charles, Missouri, United States
Job Summary
Lead the organization's cybersecurity strategy, governance, and risk management program while managing all CMMC readiness, implementation, certification, and continuous compliance activities. Develop and maintain policies, procedures, and security controls aligned with NIST SP 800-171, CMMC, and other applicable regulatory requirements. Oversee protection of Controlled Unclassified Information (CUI) and conduct cybersecurity risk assessments to prioritize remediation efforts. Coordinate internal and external security audits, assessments, and customer cybersecurity requirements. Manage incident response planning, investigation, reporting, and recovery activities, while monitoring threats and implementing defensive measures. Collaborate with IT leadership to ensure secure network architecture, endpoint protection, identity management, and cloud security. Manage relationships with Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), consultants, and third-party assessors. Report cybersecurity risks, compliance status, and key performance metrics to executive leadership. Develop security budgets and recommend technology investments that support business objectives.
Required Qualifications
- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience)
- 3+ years of cybersecurity experience and/or experience in an information security role
- Demonstrated experience implementing NIST SP 800-171 security controls
- Experience leading CMMC preparation, assessments, or certification initiatives
- Strong knowledge of risk management frameworks and cybersecurity governance
- Experience developing security policies, standards, and procedures
- Excellent communication and leadership skills with the ability to work across all levels of the organization
- Applicant must be a U.S. Person
- Must be able and willing to obtain and maintain a U.S. security clearance if one is not currently held
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.