Cybersecurity and Compliance Manager

Kinetix Technology Services, LLC

6d•Remote

About The Position

Kinetix is seeking a remote, United States-based Cybersecurity and Compliance Manager to lead client cybersecurity compliance programs, risk management initiatives, and strategic security advisory services. This senior expert on the Cybersecurity Services team partners with clients, executive leadership, security operations, and internal analysts to strengthen security programs and meet contractual obligations. The role leads multi-framework compliance work, provides vCISO advisory services and audit guidance, and delivers executive-level risk reporting. It also supports the growth of the security and compliance team through guidance and coaching. The successful candidate combines cybersecurity governance, risk, and compliance expertise with client-facing leadership and practical technical knowledge. The manager translates security risks into actionable recommendations, oversees consistent cybersecurity service delivery, and helps clients improve security maturity through assessments, remediation planning, and ongoing compliance monitoring. The role collaborates with technical teams to fulfill security commitments and maintain alignment with applicable regulatory and contractual requirements. Kinetix is a fast-growing managed service provider supporting startups across the Bay Area, New York, and beyond. The company describes its workplace as supportive of ongoing learning, regular feedback, clear career paths, and flexibility in a distributed environment. Compensation is expected to start at $120,000, with the offer determined by factors including experience and expertise.

Requirements

At least 8 years of experience in information technology, cybersecurity, information security governance, risk management, or regulatory compliance.
Active CISSP certification in good standing.
Strong working knowledge of NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, CMMC, and ISO 27001, including experience supporting audits, evidence management, and compliance assessments.
Demonstrated experience conducting cybersecurity risk assessments, managing third-party and vendor risk, supporting cyber insurance assessments, and using GRC or compliance automation platforms.
Strong client-facing communication, analytical, and organizational skills.
Ability to advise executive stakeholders, manage multiple engagements, and evaluate security controls across Windows, macOS, cloud, networking, and identity environments.

Nice To Haves

Additional professional certifications such as CISM, CISA, or other relevant cybersecurity and compliance credentials.
Previous leadership experience managing teams, projects, client engagements, or cybersecurity advisory programs.
Experience in an MSP, MSSP, or consulting environment delivering vCISO or cybersecurity advisory services.
Experience with security operations, incident response, vulnerability management, SIEM platforms, and endpoint security technologies.
Familiarity with CrowdStrike, ThreatLocker, Cisco Secure Connect, Cisco Meraki, OpenDNS, Jamf MDM, Microsoft Intune, Azure, OneLogin, and Okta.
Experience with AI governance, security policies, and emerging AI-related risks.
A bachelor's degree in Information Security, Information Technology, or a related field, or equivalent professional experience.
Strategic thinking that balances long-term cybersecurity planning with hands-on execution.
Passion for technology, cybersecurity, and continuous improvement.
Highly organized, detail-oriented, process-driven, and self-motivated approach.
Integrity, discretion, accountability, and openness to feedback.
Collaborative, consultative, and service-oriented approach to improving outcomes for clients and team members.

Responsibilities

Lead cybersecurity compliance initiatives, including risk assessments, policy development, audit preparation, evidence collection, and ongoing monitoring across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001.
Conduct compliance gap assessments, framework crosswalks, maturity evaluations, and remediation tracking.
Oversee the Security Program Platform and associated governance, risk, and compliance processes.
Manage internal and client risk assessments, cyber insurance questionnaires and renewals, third-party risk management, and vendor security due diligence.
Provide vCISO advisory services, including security strategy, roadmaps, investment planning, and executive- and board-level reporting.
Guide clients and internal stakeholders on responsible AI adoption, including AI governance, acceptable-use policies, data protection, and emerging security risks.
Maintain security policies, procedures, and audit-ready documentation, and track identified gaps through remediation.
Oversee Cybersecurity Services delivery to ensure contractual security commitments are fulfilled and service gaps are addressed with clear accountability.
Determine applicable cybersecurity deliverables across Essentials, Core, Enterprise, and Advanced service tiers based on client requirements, endpoint counts, compliance obligations, and risk profiles.
Ensure consistent delivery of Cyber Posture Snapshots, Continuous Health Checks, managed remediation, NIST CSF maturity scoring, and annual security summaries.
Lead executive client strategy meetings and serve as the escalation point for complex cybersecurity, compliance, and risk management concerns.
Communicate security findings, business risks, remediation priorities, and strategic recommendations to technical and nontechnical stakeholders.
Collaborate with security operations teams on incident response, vulnerability management, and remediation, including appropriate client communication and compliance follow-up.
Support pre-sales engagements, cybersecurity service recommendations, and opportunities to expand client security programs.
Oversee annual backup recovery testing and provide business continuity and disaster recovery guidance.
Serve as the primary liaison between Cyber74 and Kinetix on cybersecurity and compliance guidance.
Guide and coach Security & Compliance Analysts and Security Success Analysts, with potential direct leadership as the team expands.