Engineering Manager, RAAS | Compliance Advisory and Automation Services

Aprio•Nashville, TN

22h•$132,200 - $156,400•Hybrid

About The Position

Join Aprio's Risk Advisory and Assurance Services (RAAS) team and you will help clients maximize their opportunities. Aprio Advisory Group, LLC is a progressive, fast-growing firm looking for an Engineering Manager, RAAS | Compliance Advisory and Automation Services to join their dynamic team. We are seeking an experienced technical manager to lead our cloud security consultants serving small to enterprise organizations across the Defense Industrial Base. This manager role will guide our consultants who are assisting our clients through their CMMC Level 2 certification journey while ensuring our consultants have the right leadership support.

Requirements

Bachelor’s degree in computer science, Information Security, or related field (Master's preferred).
10+ years of progressive experience in information security and compliance, with significant consulting experience.
4+ years managing security consultants with proven track record of team productivity.
Deep expertise in securing complex cloud environments, threat modeling, and risk assessment.
Strong cross-functional collaboration skills, balancing security requirements with business objectives.
Clear and persuasive communicator in both writing and verbal settings.
Low ego, high empathy leader who attracts talent and builds diverse, inclusive teams.
Passionate about developing engineers' careers in a supportive yet challenging environment.
5+ hands-on experience implementing Microsoft security solutions across varied environments.
Experience translating technical requirements into business terms for non-technical stakeholders.
Holds any Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500).
Azure and Azure Government cloud security configurations.
Microsoft Defender suite deployment and optimization.
Microsoft Purview, Azure Information Protection, and data classification strategies.
Microsoft Sentinel and cost-effective SIEM alternatives.
Identity and Access Management solutions (Azure AD, Conditional Access).
Network segmentation and boundary protection strategies.
Security documentation and technical writing.
Build trust and credibility with stakeholders at all organizational levels.
Translate technical concepts for audiences from small business owners to enterprise CISOs.
Right-size security programs based on organizational maturity, resources, and risk tolerance.
Balance security requirements with operational realities and budget constraints.
Manage complex, multi-phase engagements with competing priorities and timelines,
Develop junior consultants and elevate overall team capabilities.
Navigate unique challenges across diverse client environments and technical landscapes.

Nice To Haves

Security clearance preferred.
CISSP, CISM, or equivalent security leadership certification.
Additional relevant certifications (Security+, CISA, GCIH, GIAC).

Responsibilities

Support proposal development as a technical SME by identifying solutions, estimating time and resources, and participating in discovery and scoping.
Prepare organizations for C3PAO assessments and provide certification readiness reviews.
Develop customized remediation roadmaps scaled to client size, budget, and technical capabilities.
Manage resource allocation and workload distribution across concurrent client engagements.
Design right-sized Microsoft, AWS or GCP security solutions appropriate for small business through enterprise clients.
Implementation knowledge of Microsoft security solutions like Defender, Purview, Sentinel etc..
Guide clients on Azure Government vs. commercial cloud decisions based on CMMC requirements.
Build and mentor a team of 4-6 security consultants with diverse skill sets and experience levels.
Develop standardized methodologies, playbooks, and procedures for technical delivery.
Establish quality assurance processes and peer review mechanisms for client deliverables.
Create training programs to elevate team capabilities in CMMC and Microsoft security technologies.
Foster culture of client success, technical excellence, and continuous learning.
Identify opportunities to expand consulting services and develop new offerings.
Contribute to business development activities and proposal responses.
Represent the practice at client events.
Develop thought leadership content on CMMC implementation best practices.
Build relationships with Microsoft partners, C3PAOs, and industry organizations.
Stay current on CMMC program updates and DoD cybersecurity requirements.

Benefits

Medical, Dental, and Vision Insurance on the first day of employment
Flexible Spending Account and Dependent Care Account
401k with Profit Sharing
9+ holidays and discretionary time off structure
Parental Leave – coverage for both primary and secondary caregivers
Tuition Assistance Program and CPA support program with cash incentive upon completion
Discretionary incentive compensation based on firm, group and individual performance
Incentive compensation related to origination of new client sales
Top rated wellness program
Flexible working environment including remote and hybrid options