Cyber Security & Compliance Manager

Rivell • Sewell, NJ

3d • Onsite

About The Position

Rivell, a leading Managed Services Provider (MSP) based in Sewell, New Jersey, is seeking a Cybersecurity & Compliance Manager. This role is responsible for overseeing, maintaining, and strengthening cybersecurity and regulatory compliance initiatives for clients. The manager will act as a primary contact for clients on cybersecurity matters, including assessments, compliance, cyber insurance, and third-party questionnaires. The position involves identifying security and compliance gaps, creating remediation plans, managing documentation, and ensuring clients meet regulatory requirements. The ideal candidate is organized, detail-oriented, and can communicate effectively with both technical and non-technical audiences, translating complex requirements into actionable steps.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Security, Risk Management, or a related field, or equivalent professional experience.
• Experience working in cybersecurity, governance, risk and compliance (GRC), IT auditing, information security, or managed IT services.
• Strong understanding of cybersecurity frameworks and regulatory requirements such as NIST Cybersecurity Framework, CIS Controls, HIPAA, PCI DSS, CJIS, FTC Safeguards Rule, CMMC, and ISO 27001.
• Experience completing cybersecurity questionnaires, cyber insurance applications, vendor risk assessments, compliance assessments, or security audits is strongly preferred.
• Ability to review regulatory or contractual cybersecurity requirements and determine the technical and administrative controls necessary to satisfy them.
• Strong understanding of common cybersecurity technologies and controls, including: Firewalls, Endpoint Detection and Response (EDR), SIEM and security monitoring, Multi-factor authentication, Email security, Vulnerability management, Backup and disaster recovery, Identity and access management, Encryption, Network security.
• Experience developing or maintaining cybersecurity policies, risk assessments, compliance documentation, and remediation plans.
• Strong organizational and project management skills with the ability to manage compliance requirements across multiple clients simultaneously.
• Excellent written and verbal communication skills.
• Ability to explain cybersecurity risks and regulatory requirements to executives, business owners, and other non-technical stakeholders.
• Strong analytical, documentation, and problem-solving skills.
• Ability to work independently while coordinating effectively with technical teams, clients, vendors, and management.

Nice To Haves

• Experience working within an MSP or MSSP environment is preferred.
• Industry certifications such as Security+, CySA+, CISSP, CISM, CRISC, CISA, or similar certifications are preferred.

Responsibilities

• Manage cybersecurity and compliance initiatives across multiple client environments.
• Complete and coordinate cybersecurity questionnaires, security surveys, vendor security assessments, cyber insurance questionnaires, and third-party risk assessments on behalf of clients.
• Identify the regulatory, contractual, and industry-specific cybersecurity requirements applicable to each client.
• Help ensure clients maintain compliance with applicable frameworks and regulatory bodies, including standards such as HIPAA, PCI DSS, CJIS, NIST, CIS Controls, FTC Safeguards Rule, CMMC, ISO 27001, and other applicable requirements.
• Conduct cybersecurity and compliance assessments to identify gaps between a client's current environment and required security standards.
• Develop and maintain remediation plans, risk registers, compliance checklists, policies, procedures, and supporting documentation.
• Work with Rivell's technical teams to implement security controls required to address identified risks or compliance deficiencies.
• Track remediation items and follow up with clients and internal teams to ensure required corrective actions are completed.
• Prepare clients for security audits, compliance assessments, cyber insurance reviews, and vendor security reviews.
• Collect, organize, and maintain documentation and evidence required for audits and compliance verification.
• Review client environments for adherence to cybersecurity best practices, including areas such as: Multi-factor authentication, Endpoint detection and response, Email security, Vulnerability management, Patch management, Backup and disaster recovery, Access control and least privilege, Firewall and network security, Security awareness training, Logging and monitoring, Data protection and encryption.
• Assist with the development, review, and maintenance of client cybersecurity policies, including acceptable use, incident response, password policies, access control, business continuity, and other required documentation.
• Coordinate vulnerability assessments, security reviews, and other cybersecurity testing as required.
• Review security findings and work with technical staff and clients to prioritize remediation based on risk and regulatory requirements.
• Assist clients with cybersecurity incident response planning and documentation.
• Provide cybersecurity and compliance guidance to clients, management, and internal technical teams.
• Present security and compliance findings to clients in clear, understandable language, including recommendations and next steps.
• Maintain detailed documentation of assessments, risks, remediation efforts, compliance requirements, and client security posture.
• Stay current with changes to cybersecurity regulations, compliance frameworks, cyber insurance requirements, emerging threats, and industry best practices.

Benefits

• Competitive salary.
• 401(k) retirement plan.
• Paid time off.
• Comprehensive benefits package.
• Professional development opportunities.
• Certification reimbursement.
• Opportunities for continued advancement as Rivell's cybersecurity and compliance services grow.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager