Government Compliance Sr. Manager

Vertiv Group•Westerville, OH

About The Position

The Government Compliance Sr. Manager ensures that cloud and data center infrastructure meets federal procurement, supply chain, facility security, and cybersecurity requirements. The role protects federal revenue streams by managing compliance risks and developing standard operating procedures for CMMC, ICD 705 physical security, DPAS prioritization, BAA/TAA supply chains, GIDEP reporting, and OCONUS deployments. The position oversees facility security and ICD 705 compliance, including SCIF and SAPF requirements, construction security profiles, accreditation documentation, and coordination with Accrediting Officials. It serves as the corporate representative and administrator for GIDEP, leads supply-chain integrity investigations, and governs alignment with CMMC 2.0 Level 2 and NIST SP 800-171. The role also manages DPAS procedures, BAA/TAA verification, international deployment compliance, federal infrastructure audit responses, and relevant DFARS Contractor Business Systems. It collaborates across Sales, Business Development, Procurement, Engineering, Legal, Manufacturing, IT Security, and trade legal teams, and participates in Facility Clearance duties as required. The position is based in a standard office environment and requires 10% travel.

Requirements

Bachelor’s degree in Cybersecurity, Supply Chain Management, Business Administration, Legal Studies, or a related field.
At least 7 years of progressive federal compliance experience, or at least 5 years with an active Top Secret/SCI clearance and relevant certifications such as CISSP or CCP.
Demonstrated GIDEP database administration experience, including identifying, tracking, and reporting hardware deficiencies and counterfeit alerts.
Direct ICD 705 physical security management experience or experience coordinating with Facility Security Officers for SCIF accreditation.
Proven experience managing DPAS priority ratings and BAA/TAA country-of-origin certification workflows.
Experience leading corporate responses to DCMA/DCAA federal infrastructure audits.
Ability to influence matrixed cross-functional teams including Sales, Engineering, Manufacturing, and Legal.
Strong technical acumen in data center power, cooling, and hardware architectures.
Analytical rigor in auditing multi-tiered supply chains and country-of-origin documentation.
Executive-level communication skills to bridge technical, commercial, and regulatory audiences.
Deep operational knowledge of FAR/DFARS procurement clauses.
Working proficiency in ICD 705 Technical Specifications, CMMC 2.0 Level 2, NIST SP 800-171, and FedRAMP security baselines.
Familiarity with EAR/ITAR export classification frameworks and OCONUS deployment requirements.
Understanding of CUI handling requirements and DFARS Contractor Business Systems.
Knowledge of FedRAMP authorization processes for federal cloud workloads.
Familiarity with cyber incident reporting requirements under DFARS 252.204-7012.
Awareness of Cyber Supply Chain Risk Management principles.
Familiarity with NIST SP 800-137 continuous monitoring frameworks.

Nice To Haves

Master’s degree in Cybersecurity, Supply Chain Management, Business Administration, or Legal Studies.
Active U.S. government security clearance.
CISSP or Certified CMMC Professional (CCP) certification.
Certified Professional Contracts Manager (CPCM) or Certified Federal Contracts Manager (CFCM) certification.
Facility Security Officer certification or Industrial Security Professional credential.
Project Management Professional (PMP) certification or equivalent.
Experience with GRC platforms such as Archer or ServiceNow GRC.
Familiarity with TIA-942 or Uptime Institute data center physical security standards.

Responsibilities

Monitor, implement, and ensure ICD 705 compliance for SCIFs and SAPFs within data centers.
Oversee physical and technical security construction profiles from initial design through formal accreditation, ensuring alignment with ICD 705 Technical Specifications.
Maintain Fixed Facility Checklists and Construction Security Plans for submission to the Accrediting Official.
Partner with Federal Sales and Business Development to review RFPs and assess compliance feasibility before bid submission.
Embed compliance requirements into Procurement workflows to vet subcontractors and hardware vendors.
Advise Hardware Engineering on component qualification requirements and design-in constraints.
Collaborate with Legal Counsel on contract reviews, regulatory risk assessments, and disclosure strategies.
Work with Manufacturing to ensure production lines meet federal tracking and security baselines.
Serve as the designated corporate GIDEP representative and administrator.
Monitor GIDEP failure experience data, suspect counterfeit alerts, and diminishing source notices.
Author and submit GIDEP alerts for counterfeit components or systemic equipment failures.
Lead root-cause investigations and implement material quarantine protocols for identified parts.
Lead data center operational alignment with CMMC 2.0 Level 2 and NIST SP 800-171 controls.
Partner with IT Security to safeguard CUI across environments.
Document and track Plans of Action and Milestones to manage systemic security gaps.
Optimize standard operating procedures for DPAS-rated orders and enforce mandatory flow-down requirements for vendors, subcontractors, and construction partners.
Resolve resource-allocation conflicts between commercial projects and rated defense infrastructure orders.
Administer BAA and TAA compliance verifications and audit multi-tiered hardware supply chains for country of origin.
Implement component-tracking workflows to mitigate counterfeit or non-compliant hardware risks.
Oversee international compliance frameworks for OCONUS data center sales and material deployments.
Partner with trade legal teams to clear ITAR and EAR export licensing requirements.
Ensure overseas field engineering teams comply with local defense regulations and SOFAs.
Lead corporate responses to DCMA and DCAA federal infrastructure audits.
Maintain continuous verification for relevant DFARS Contractor Business Systems used in pricing.
Author corporate policy manuals governing federal data privacy and supply chain ethics.
Participate in Facility Clearance duties as required.