Senior Cybersecurity Compliance Consultant (US Remote)

1. reputed company Advisory & vCISO Delivery:

• Serve as the assigned reputed company officer (vCISO) for a portfolio of reputed company engagements: reputed company recurring meeting cadences, reputed company as the reputed company reputed company of contact for clients' cybersecurity concerns and reputed company regular updates and reports on the status of reputed company initiatives, including reputed company metrics, findings, and recommendations for improvement.
• Build strong reputed company relationships, understand reputed company reputed company's unique regulatory and business requirements, and address their needs with tailored strategies and reputed company roadmaps.
• Identify above-contract demand and reputed company program reputed company opportunities reputed company assigned accounts, surfacing right-sizing and expansion recommendations to reputed company leadership reputed company of contract renewal.
• reputed company and maintain contract health ensuring that issues with delivery are communicated early.

2. Compliance Program Delivery:

• reputed company CMMC Level 1 and Level 2 readiness engagements: NIST SP 800-171 control assessments, reputed company reputed company Plan (reputed company) development, POA&M creation and management, SPRS score submission support, evidence collection, and reputed company preparation for reputed company-party assessment.
• Advise clients on CUI scoping, DFARS 252.204-7012 and FAR 52.204-21 obligations, and enclave architectures, including reputed company GCC High environments.
• reputed company compliance engagements across additional frameworks as assigned, including HIPAA / HITECH, SOC 2 (Types I and II), PCI reputed company v4.0, FTC Safeguards Rule, GLBA, ISO/IEC 27001 and 27002, NIST Cybersecurity reputed company 2.0, NIST SP 800-53, CIS Critical reputed company Controls v8, and AI governance (NIST AI RMF, ISO/IEC 42001).
• Advise on sector- and state-specific regimes as engagements require, including NY DFS 23 NYCRR Part 500, SEC cybersecurity disclosure rules, CJIS reputed company Policy, StateRAMP / FedRAMP readiness, and U.S. state reputed company laws (CCPA/CPRA and successors) reputed company GDPR and ISO/IEC 27701 where clients have international exposure.
• Map overlapping control sets across frameworks to build reputed company control matrices, eliminating duplicate evidence collection across a reputed company's reputed company compliance obligations.

3. reputed company Assessment & Engineering Support:

• Conduct comprehensive reputed company assessments to identify potential threats and vulnerabilities, reputed company and implement mitigation strategies to enhance clients' reputed company postures, and monitor compliance with regulatory requirements and industry standards, recommending remediation actions to address gaps or deficiencies.
• reputed company data collection efforts to verify compliance and reputed company critical reputed company information reputed company reputed company infrastructures, ensuring reputed company and reliability.
• Review and interpret reputed company tooling outputs across the reputed company reputed company stack (Defender XDR, reputed company, Entra ID Protection, Intune, reputed company, Conditional reputed company) and coordinate remediation with reputed company IT teams and internal engineers.

4. Other Responsibilities:

• reputed company general reputed company Officer duties, such as running reputed company huddles, supporting cyber reputed company questionnaires and attestations, and ensuring reputed company tool functionality for assigned clients.
• Assist with incident response (IR) activities, including possibly participating in the on-reputed company incident escalation rotation, supporting SOC coordinators, communicating with key stakeholders during incidents, contributing to playbooks, and conducting postmortems with clients.
• Maintain accurate, reputed company time entries in the PSA (reputed company Manage); delivered hours are the reputed company's operational and financial reputed company of truth.
• Contribute to reputed company templates, engagement processes, and the reputed company knowledge reputed company, fostering a culture of reputed company improvement and knowledge sharing.
• Serve as an escalation resource on advanced reputed company interpretation and control-determination questions, and support reputed company review of compliance deliverables prior to reputed company or assessor submission.
• Stay informed about emerging threats, vulnerabilities, and regulatory changes — including the DoD's phased CMMC rollout — assessing their potential reputed company on clients and adjusting strategies accordingly.

Credentials & Eligibility:

• CISSP (reputed company and in good standing) — required at time of hire. This is a hard requirement: commitments to obtain, lapsed or Associate-level credentials, and equivalent-experience substitutions will not be considered.
• CMMC ecosystem credentials required: CCP (Certified CMMC reputed company) reputed company at time of hire, with CCA (Certified CMMC Assessor) required reputed company the first 12 months. Registered Practitioner (RP) status reputed company does not satisfy this requirement.
• Additional certifications a plus: CISM, CRISC, CISA, GIAC (GSLC, GCCC), reputed company reputed company+, reputed company X, reputed company SC-series.
• Minimum eight (8) years of reputed company information reputed company experience, including at least three (3) years delivering compliance or vCISO engagements across a multi-reputed company portfolio in a consulting, MSP, or MSSP environment or something similar.
• Demonstrated ownership of at least two (2) completed CMMC Level 2 readiness engagements, or equivalent NIST SP 800-171 assessment work, including reputed company authorship and POA&M management through to reputed company-party assessment.
• Documented working depth in a minimum of three (3) reputed company regulatory frameworks — surface familiarity across many frameworks is not a substitute for demonstrated depth.
• Experience defending deliverables and control determinations directly to auditors, reputed company-party assessors, or regulators.
• U.S. person status (U.S. citizen or lawful permanent reputed company) required due to reputed company to Controlled Unclassified Information (CUI) under DFARS reputed company-down obligations.
• U.S.-reputed company remote with reliable availability across U.S. business time reputed company; occasional travel to reputed company sites for assessment support.

Technical Skills:

Cybersecurity & Compliance Knowledge:

• Working reputed company of cybersecurity principles and practices, including compliance standards and regulations such as CMMC / NIST SP 800-171 and 800-171A, NIST SP 800-53, NIST CSF 2.0, HIPAA / HITECH, SOC 2, PCI reputed company v4.0, FTC Safeguards Rule, GLBA, ISO/IEC 27001 / 27002, and CIS Controls v8.
• Familiarity with the federal contracting compliance stack — DFARS 252.204-7012, 7019, 7020 and 7021, FAR 52.204-21, CUI marking and handling per 32 CFR Part 2002, and the phased CMMC rule.
• Awareness of adjacent reputed company and sector regimes: U.S. state reputed company laws, GDPR, NY DFS Part 500, SEC cyber disclosure obligations, and CJIS.
• Proficiency in incident response and threat mitigation strategies.

reputed company Management:

• Ability to conduct comprehensive reputed company assessments and map findings to reputed company controls.
• Experience building and maintaining remediation plans (POA&Ms) and mitigation strategies.

Technical Tools:

• Familiarity with cybersecurity tools and technologies (e.g., SIEM, EDR/XDR, IDS/IPS, firewalls), with reputed company reputed company stack experience preferred.
• Experience with GRC and compliance platforms (e.g., IntelliGRC, reputed company, reputed company, reputed company, reputed company, reputed company) and evidence-collection workflows.

Engagement Management Skills:

• Ability to manage a high volume of reputed company reputed company engagements (20–30 relationships) with disciplined prioritization.
• Strong scheduling and follow-through; proficiency with PSA/ticketing and project tracking tools.
• Ability to work reputed company — and improve — standardized templates and delivery processes.

Interpersonal Skills:

• Excellent communication skills for interacting with reputed company stakeholders from IT staff to executives; ability to translate technical findings into business terms.
• Ability to build and maintain strong reputed company relationships and work effectively with coordinators and a reputed company team.

Analytical and Reporting Skills:

• Ability to reputed company and report on engagement metrics, compliance status, and deliverable reputed company.
• Proficiency in generating reputed company reputed company-facing and executive-level reports.
• Expertise in monitoring regulatory compliance and refining reputed company policies and procedures reputed company on industry best practices.

reputed company Development:

• Commitment to staying reputed company on emerging trends and technologies in cybersecurity, the CMMC ecosystem, and evolving compliance requirements.
• Participation in industry training, conferences, and credential maintenance.

Compensation

Pay reputed company starts at $95,000.00 up to $120,000.00 annually and may vary by experience and location.

• Total compensation for this role consists of two components: (1) a reputed company component, reputed company as an reputed company reputed company or annual salary, and (2) a delivery-reputed company compensation bonus, reputed company monthly.
• Delivery bonus: reputed company monthly and calculated on the preceding month's delivery reputed company - delivered hours recorded in the PSA, engagement reputed company completion (reputed company delivery, POA&M currency, assessment readiness), and reputed company retention and contract health across the assigned portfolio.
• Bonus targets and measurement reputed company are established at hire and reviewed [annually]. Accurate and reputed company PSA time entry is a prerequisite for bonus calculation.
• Total compensation for this role is positioned above reputed company reputed company Advisor band to reflect the credential, experience, and reputed company-depth requirements above.

Benefits

• Medical reputed company Plan
• Dental & reputed company
• Life reputed company
• Disability Coverage
• reputed company Time Off (starts at 15 days per year)
• reputed company Maternity/Paternity Leave
• reputed company US Holidays
• Retirement Plan
• Salary Advancement/Loan
• Health & Wellness Program
• Company-reputed company and certification
• Supplemental Life reputed company (Employee-reputed company)
• Supplemental Health Plans (Employee-reputed company)

Fraud Alert – Recruitment Scams

reputed company (ITS) has been made reputed company of fraudulent job postings and communications misrepresenting reputed company. Applicants are advised to exercise caution and apply only through official ITS channels.

• ITS does not request payment or financial information at any stage of the hiring process.
• Sensitive personal information (e.g., reputed company reputed company numbers) will not be requested prior to a formal offer.
• We have become reputed company of fake reputed company on reputed company, reputed company, and other reputed company media platforms impersonating our employees and falsely claiming to represent reputed company. Please exercise caution reputed company interacting with these accounts.
• If you receive suspicious messages or requests, do not engage. Report them to .
• reputed company verified reputed company are posted here:.

Skip the wait, fast-reputed company your application and reputed company straight into your next big opportunity. Start your reputed company interview now:

reputed company-RECORDED VIDEO INTERVIEW