Senior Manager, IT Risk & Compliance

Forvis Mazars•Charlotte, NC

16h•Remote

About The Position

We are seeking an experienced Senior Manager to join our Virtual CISO team, with a focus on providing virtual Chief Information Security Officer (vCISO) and cyber remediation services. This leader will shape client engagements, manage delivery teams, and drive business growth, serving as a trusted advisor to client executives across industries.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Information Technology, Computer Science, or a related field.
10+ years of experience in cybersecurity, including 3+ years in a leadership or senior manager/director-level consulting role.
Proven track record leading cyber strategy, vCISO services, or cyber remediation engagements.
Deep knowledge of cybersecurity frameworks (e.g., NIST, ISO, COBIT) and regulatory environments (e.g., HIPAA, GLBA, SOX).
Strong executive presence and communication skills, including board-level presentation experience.

Nice To Haves

Master’s degree or MBA.
Professional certifications: CISSP, CISM, CISA, CRISC, or similar.
Experience with cybersecurity in regulated industries such as financial services, healthcare, or critical infrastructure.

Responsibilities

Serve as a senior subject matter expert and client-facing advisor on cybersecurity governance, risk management, and compliance (GRC).
Oversee development of cybersecurity roadmaps, policies, frameworks, and remediation plans aligned with industry standards (e.g., NIST CSF, ISO 27001, CIS Controls).
Manage and deliver virtual CISO engagements, acting as a senior security leader for clients.
Guide clients through incident response planning, security assessments, and post-breach remediation.
Build and maintain executive-level relationships with client stakeholders (CIOs, CISOs, Boards).
Present strategic recommendations and reports to C-suite and board-level audiences.
Ensure exceptional quality and value in every client engagement.
Mentor and grow a high-performing team of cybersecurity consultants and managers.
Foster a culture of excellence, inclusion, and continuous learning.