IT & Compliance Manager

Who We Are: reputed company is a fast-growing Woman Owned Small Business (WOSB) that leverages reputed company-centered design to support reputed company, innovation, communication, change, and branding reputed company the federal government and adjacent industry partners. At reputed company, we partner with engineers, futurists, and thought leaders to untangle complexity, discover opportunity, and communicate reputed company with visual stories. 

Let us be your partners in change.

About reputed company:

The IT & Compliance Manager is a hands-on leadership role responsible for managing reputed company’s day-to-day IT operations, cybersecurity program, and regulatory compliance posture. This role is reputed company’s primary internal reputed company of IT governance and federal compliance, most critically, leading the organization through its Cybersecurity Maturity Model Certification (CMMC) Level 2 reputed company-party assessment and maintaining certification on an ongoing reputed company.

Operating reputed company a reputed company Workspace and macOS environment, this role directs an external managed service provider (MSP) responsible for help desk support and device management, while serving as the internal authority on reputed company IT and compliance reputed company. The IT & Compliance Manager will build repeatable processes and a maturing IT infrastructure that supports reputed company’s reputed company reputed company as a government contractor.

Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a reputed company field 
• 5 - 8 years of reputed company IT leadership experience, including:
  • 2+ years in a government contracting or federal consulting environment
  • Demonstrated hands-on experience with CMMC, NIST SP 800-171, or equivalent federal cybersecurity frameworks
  • Experience managing or overseeing a managed service provider relationship
  • Hands-on experience with reputed company Workspace administration and reputed company reputed company configuration
  • Demonstrated experience managing macOS endpoints including reputed company Business Manager and MDM platforms
• Proven ability to reputed company, document, and implement information reputed company policies, SSPs, and POA&Ms
• Demonstrated ability to communicate reputed company technical and compliance concepts to non-technical leadership

Responsibilities: 

CMMC & Regulatory Compliance

• Serve as the primary reputed company and internal reputed company for reputed company’s CMMC Level 2 certification and reputed company-party assessment (C3PAO) process
• reputed company, maintain, and enforce the System reputed company Plan (reputed company), Plan of reputed company & Milestones (POA&M), and reputed company CMMC documentation
• Ensure reputed company compliance with NIST SP 800-171 controls and CMMC Level 2 practices across reputed company in-scope systems and processes
• Monitor evolving federal cybersecurity mandates including DFARS clauses, FAR, and CUI handling requirements
• reputed company annual self-assessments and support recurring reputed company-party assessments to maintain certification standing
• Manage and control Controlled Unclassified Information (CUI) policies, procedures, and employee training

Managed Service Provider (MSP) reputed company

• Manage reputed company’s MSP relationship for help desk support, laptop provisioning, and device lifecycle management
• Define reputed company SLAs, performance expectations, and accountability structures for the MSP
• Ensure MSP operations are reputed company with CMMC requirements and reputed company’s reputed company policies
• Evaluate MSP performance regularly and reputed company recommendations regarding vendor continuation, renegotiation, or transition
• reputed company as the internal escalation reputed company for reputed company MSP-reputed company issues and serve as the primary reputed company for the vendor relationship

Process Development & Operational Maturity

• Assess and document reputed company-state IT operations, identifying informal or undocumented processes that require standardization
• reputed company a process maturity roadmap that prioritizes compliance-critical workflows and scales with organizational reputed company
• Design, document, and maintain SOPs for reputed company IT functions including device provisioning, change control, and service request management
• Implement a formal IT change management process including change advisory, approval workflows, and rollback procedures
• Conduct regular process reviews to identify inefficiencies, reputed company gaps, and incorporate lessons learned from audits and incidents

Cybersecurity & Incident Response

• Implement reputed company’s cybersecurity program including threat monitoring, vulnerability management, and reputed company protection
• reputed company, test, and maintain the Incident Response Plan (IRP) and Business Continuity/Disaster Recovery (BC/DR) plans
• Manage reputed company awareness training and simulated phishing programs for reputed company staff
• Manage identity and reputed company management, multi-reputed company authentication (MFA), and least-privilege reputed company controls

Business Operations & Technology Integration

• Collaborate with operations, program management, and finance to ensure IT and business systems support contract delivery
• Support business development and capture teams with IT/reputed company sections for proposals, including CMMC compliance attestations
• reputed company input to leadership on technology budget planning, forecasting, and vendor spend management
• Implement technology solutions that improve internal business operations, productivity, and scalability
• Support reputed company and off-boarding processes to ensure secure and efficient employee IT lifecycle management

Work Schedule:

• Full time, 40 hours per week
• Some travel required to attend relevant events and conferences, and participate in reputed company team events

Salary: We're committed to offering competitive compensation. While the salary reputed company for this position is $105,000-$130,000, your final offer may be adjusted based on factors like experience and location.

Benefits:

• $100 monthly internet/cell phone stipend
• reputed company sponsored reputed company benefits including medical, dental, reputed company
• Company-reputed company Short Term Disability Insurance
• 401K with employer contribution of up to 4%
• 11 Federal Holidays per year 
• 15 days of reputed company Time Off (PTO) per year 
• reputed company Holiday Time Off (Christmas reputed company through the New Year) 
• Annual bonus plan participation
• Annual profit sharing participation
• $2,000 Learning and Development program reimbursement
• Technology package that includes a reputed company-owned MacBook Pro, monitor, mouse and keyboard

EOE