Cybersecurity Compliance Lead

The ideal candidate is a cybersecurity compliance leader with 8+ years of experience in cybersecurity compliance, information assurance, or a closely related field. This role requires hands-on experience interfacing directly with government cybersecurity teams and working in organizations that must meet federal security requirements.

Responsibilities

• Own and mature the organization’s cybersecurity compliance program against NIST 800-171 and NIST 800-53.
• Serve as the primary liaison to government cybersecurity teams, assessors, and sponsors, and represent the company in audits and reviews.
• Lead the development, maintenance, and continuous improvement of System Security Plans (SSPs), POA&Ms, and supporting compliance documentation.
• Establish and enforce controls for the handling, storage, and transmission of Controlled Unclassified Information (CUI).
• Ensure compliance with EAR and ITAR export-control requirements across systems, data, and personnel.
• Conduct security control assessments, gap analyses, and risk assessments, and drive remediation to closure.
• Partner with IT, Security, Engineering, and Legal teams to embed compliance requirements into systems and processes.
• Prepare the organization for third-party assessments and government accreditation efforts such as CMMC.
• Support RMF/ATO packages for sponsor-accredited systems, and compliance for classified information systems (ISSM/ISSO-type duties) in coordination with the facility security officer.

Qualifications

• 8+ years of experience in cybersecurity compliance, information assurance, or a closely related field.
• Demonstrated experience interfacing with government cybersecurity teams and working at a company required to meet government security requirements.
• Hands-on experience implementing and assessing NIST 800-171 and NIST 800-53 controls.
• Experience handling and protecting Controlled Unclassified Information (CUI).
• Working knowledge of EAR and ITAR export-control regulations.
• Experience developing and maintaining compliance artifacts such as System Security Plans (SSPs) and POA&Ms.
• Active U.S. security clearance, TS/SCI preferred.
• Hands-on RMF experience including ATO package development, familiarity with NISPOM / 32 CFR Part 117.
• Proactive, reliable, and able to work with minimal supervision.

Nice-to-have Skills

• Experience leading CMMC readiness or certification efforts.
• Experience supporting DoD or other U.S. Government programs.
• Familiarity with DFARS, FedRAMP, or CMMC requirements.
• Relevant certifications such as CISSP, CISM, CAP.