Cyber Risk & Compliance Architect

MAD Security, LLC; Huntsville (AL); On-site; USD 95,000 - 125,000; Full time

Job summary

MAD Security, LLC seeks a Cyber Security Risk and Compliance Consultant in Huntsville, AL to conduct gap assessments and ongoing consulting for clients, focusing on NIST 800-171, RMF, CSF, CIS Controls, DFARS, and CMMC. You will conduct interviews, collect evidence, guide remediation, and help clients improve their security posture while managing project tasks and client engagements.

The role requires 2+ years in information security, familiarity with multiple frameworks, and strong policy

Qualifications

• Familiar with security frameworks such as NIST 800-171, RMF, CSF, CIS Controls, DFARS, CMMC.
• Experience leading information security engagements and reporting for DFARS/NIST/CMMC.
• Ability to author cybersecurity policies and procedures (IR, BC, DR, etc.).
• Certifications like CCP, CCA, CISSP, CISM, CISA, Security+ or equivalent preferred.

Responsibilities

• Conduct Cybersecurity gap assessments and provide resulting reports.
• Lead consulting engagements to assist with POA&M remediation efforts.
• Manage and execute project-level tasks and milestones.
• Educate clients on information security and applicable control requirements.
• Baseline existing risks, exposure, framework, and compliance levels.
• Advise on risk mitigation and remediation plans.

Skills

Security framework knowledge

DFARS/NIST/CMMC experience

Policy development (IR, BC, DR)

Project management

Communication & client teamwork

Ethics & integrity

Grit & self-management

Security architecture review

Job description

MAD Security, LLC seeks a Cyber Security Risk and Compliance Consultant in Huntsville, AL to conduct gap assessments and ongoing consulting for clients, focusing on NIST 800-171, RMF, CSF, CIS Controls, DFARS, and CMMC. You will conduct interviews, collect evidence, guide remediation, and help clients improve their security posture while managing project tasks and client engagements.

The role requires 2+ years in information security, familiarity with multiple frameworks, and strong policy