Manager, Compliance Advisory

Coalfire

1d•$104,000 - $173,000•Hybrid

About The Position

The Manager, Public Sector Advisory will support Public Sector advisory engagements while managing and mentoring team members. The role combines people leadership, project delivery, and client engagement, with accountability for high-quality delivery, project margin, utilization, and adherence to established methodologies. You will lead and support advisory engagements across the Public Sector frameworks, maintain strong client relationships throughout the engagement lifecycle, and provide oversight across compliance frameworks such as FedRAMP, CMMC, DISA Cloud SRG, FISMA, etc. This role includes reviewing and developing compliance documentation, ensuring quality through peer reviews, collaborating with internal stakeholders, and supporting IT security consulting for cloud and on premises environments. As a leader, you will mentor locally based consultants, foster client relationships and lead various engagements within the Public sector advisory team. As part of your responsibilities, you will directly manage and mentor 2-3 team members, building a culture of accountability and excellence while nurturing high-trust partnerships with clients and stakeholders across all levels of their organizations throughout the engagement lifecycle. This role requires a deep understanding of compliance framework requirements, including the list of frameworks noted above. You will provide advisory consulting support, develop compliance-related reports and documentation, and ensure quality control through peer reviews of project deliverables. Collaboration will be central to your work, as youâ€™ll partner with sales, quality management, and delivery teams to ensure project timelines and deliverables are met while maintaining strong customer satisfaction. Mentorship and coaching will be key elements of your leadership. You will guide team members in technology, consulting methodologies, technical reviews, and professional writing, ensuring they meet project margin and utilization targets. Additionally, your expertise will contribute to the success of IT system security consultations for both cloud-based and on-premises environments. As a relationship builder, youâ€™ll establish trust with accounts, identify upsell and cross-sell opportunities, and escalate these to the sales team as appropriate. Your ability to cultivate collaborative partnerships will ensure client satisfaction across all engagements. To stay ahead of industry trends, youâ€™ll actively pursue professional development opportunities and encourage continuous updates to team policies, procedures, and training in alignment with best practices. Finally, your strategic contributions will support organizational goals, helping grow the service line and expand the teamâ€™s capabilities. By focusing on successful project outcomes and client satisfaction, this role will blend technical expertise, leadership, and strategic vision to drive the success of the Public sector advisory team.

Requirements

Minimum of 5 years or more of working experience in information technology, information security, technical assessment, or audits
Substantial knowledge of security control requirements (NIST, FISMA, FedRAMP, CMMC, DoD, etc.) and how they overlap with additional frameworks
Significant experience in understanding and applying relevant technical knowledge in FISMA/FedRAMP and other compliance framework assessments within moderate and large hyperscale CSP environments
Knowledge in conducting multi-framework consolidated compliance assessment activities
Detailed understanding of IT security technologies including network and application security, firewalls, access management, and data protection
Experience with virtualization and cloud technologies
Experience with client-server and traditional on-premises architecture
Familiarity with statutes and regulations across multiple industries relevant to IT
Demonstrated ability to lead moderately complex system assessments/consulting engagements independently
Demonstrated ability to assist team members with proper artifact collection and interviewing clients to ascertain control implementation details
Demonstrated ability to read and interpret all control families
Demonstrated ability to read and interpret firewall rulesets and to create network/boundary/data flow diagrams
Strong written and verbal communication skills including the ability to explain technical matters to a non-technical audience
Strong consulting skills; ability to advise and challenge the status quo while building strong relationships
Ability to build high-trust relationship and credibility quickly
Ability to lead projects successfully and delegate up and across
Strong attention to detail
Strong problem solving, decision making, organizational and analytical skills
Ability to prioritize and manage multiple initiatives/projects.
Ability to be self-driven and have strong independent initiative.
Strong excel skills with ability to develop worksheets with complex formulas
Ability to facilitate meetings to small or large groups
Diplomatic and broad minded
Ability to lead teams small to large teams in the assessment and internal environments
Ability to speak to Cloud Service Providers to resolve issues and come to a conclusion of the assessment
At least one of the following Advanced certifications or equivalent in cybersecurity or cloud: CISSP, CISA, CISM, CAP, CRISC, CMMC CCP, and/or cloud specific certification (AWS,GCP, or Azure) or specialty certification in security
Bachelor's degree (four-year college or university) or equivalent education and experience

Nice To Haves

Strong knowledge of container-based architectures
Knowledge of various cloud environments, including AWS, GCP, and Azure.
Bachelors of Science degree in a technical field (CIS, MIS, IT, Engineering, or related field)

Responsibilities

Directly manage and mentor consultants, fostering a culture of accountability, collaboration, and continuous improvement.
Provide day-to-day leadership, coaching, and performance feedback to team members aligned with project and practice expectations.
Support team member onboarding, training, and ongoing skills development.
Assist with resourcing decisions, workload planning, project margin and utilization management.
Support advisory engagements across the full project lifecycle, including planning, execution, review, and closure.
Maintain clear, professional communication with client stakeholders at multiple levels.
Escalate project risks, issues, or resourcing concerns in a timely and effective manner.
Partner with internal delivery, quality, and sales teams to ensure client satisfaction and successful outcomes.
Identify potential upsell and cross-sell opportunities and escalate them to appropriate sales stakeholders.
Execute and oversee compliance assessments aligned with recognized frameworks, including but not limited to FedRAMP, CMMC, DISA Cloud SRG, and various international frameworks noted in the description above.
Lead and perform interviews, examinations, and testing procedures to validate control implementation.
Develop, review, and maintain IT security documentation, including policies, procedures, risk assessments, and supporting artifacts.
Advise clients on improving security programs, compliance posture, and risk management practices.
Support IT system security initiatives for both cloud-based and on-premises environments.
Perform quality reviews of project deliverables to ensure accuracy, completeness, and alignment with framework requirements.
Mentor project teams on compliance methodologies, technical standards, and professional writing.
Stay current with industry trends, emerging risks, and evolving compliance requirements.
Contribute to the development and maintenance of internal policies, procedures, tools, and training materials.