Cybersecurity Risk and Compliance Manager

Patriot Machine Inc•Saint Charles, MO

2d•Onsite

About The Position

The Cybersecurity Risk and Compliance Manager is responsible for developing, implementing, and enforcing the organization's cybersecurity strategy while ensuring compliance with Department of Defense cybersecurity requirements. This is a hands-on role. This role will lead our Cybersecurity Maturity Model Certification (CMMC) program from assessment through certification and ongoing compliance, working closely with executive leadership, IT, operations, human resources, and external partners. The ideal candidate combines strategic leadership with hands-on technical expertise and has experience supporting small to mid-sized organizations operating within the Defense Industrial Base.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience)
3+ years of cybersecurity experience and/or experience in an information security role
Demonstrated experience implementing NIST SP 800-171 security controls
Experience leading CMMC preparation, assessments, or certification initiatives
Strong knowledge of risk management frameworks and cybersecurity governance
Experience developing security policies, standards, and procedures
Excellent communication and leadership skills with the ability to work across all levels of the organization
Applicant must be a U.S. Person
Must be able and willing to obtain and maintain a U.S. security clearance if one is not currently held

Responsibilities

Lead the organization's cybersecurity strategy, governance, and risk management program
Manage all CMMC readiness, implementation, certification, and continuous compliance activities
Develop and maintain policies, procedures, and security controls aligned with NIST SP 800-171, CMMC, and other applicable regulatory requirements
Oversee protection of Controlled Unclassified Information (CUI) and other sensitive company information
Conduct cybersecurity risk assessments and prioritize remediation efforts
Coordinate internal and external security audits, assessments, and customer cybersecurity requirements
Manage incident response planning, investigation, reporting, and recovery activities
Monitor cybersecurity threats and implement appropriate defensive measures
Collaborate with IT leadership to ensure secure network architecture, endpoint protection, identity management, and cloud security
Manage relationships with Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), consultants, and third-party assessors
Report cybersecurity risks, compliance status, and key performance metrics to executive leadership
Develop security budgets and recommend technology investments that support business objectives