Cybersecurity and Compliance Manager

New Charter Technologies, LLC; New Mexico; Remote; USD 130,000 - 200,000; Full time

Job summary

New Charter Technologies, LLC is seeking a Cybersecurity and Compliance Manager for a remote, United States–based role to lead cybersecurity compliance programs, risk management, and strategic security advisory services for clients.

In this role, you will serve as a senior compliance expert within the Cybersecurity Services team, partnering with clients, executive leadership, security operations, and internal analysts to strengthen security programs

Qualifications

• 8+ years in IT, cybersecurity, information security governance, risk management, or regulatory compliance.
• Strong knowledge of NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, CMMC, ISO 27001 with experience supporting audits and evidence management.
• Experience conducting cybersecurity risk assessments, managing vendor risk, supporting cyber insurance assessments, and using GRC or compliance automation platforms.
• Strong client-facing communication and analytical skills; ability to advise executive stakeholders across diverse environments.
• Leadership experience managing teams, projects, or advisory programs.
• Experience in MSP/MSSP or consulting delivering vCISO or cybersecurity advisory services.
• Experience with security operations, incident response, vulnerability management, SIEM, and endpoint security.
• Familiarity with CrowdStrike, ThreatLocker, Cisco Secure Connect, Cisco Meraki, OpenDNS, Jamf MDM, Microsoft Intune, Azure, OneLogin, and Okta.
• AI governance experience, security policies, and AI-related risk awareness; degree in IS/IT or equivalent experience.

Responsibilities

• Lead cybersecurity compliance initiatives, including risk assessments, policy development, audit preparation, evidence collection, and ongoing compliance monitoring across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI‑DSS, CMMC, and ISO 27001.
• Oversee the Security Program Platform and governance, risk, and compliance processes.
• Manage internal and client risk assessments, cyber insurance questionnaires, third‑party risk management, and vendor due diligence.
• Provide vCISO advisory services, including security strategy, roadmaps, investment planning, and executive-level reporting.
• Guide clients on responsible AI adoption, including AI governance, data protection, and emerging security risks.
• Maintain security policies, procedures, and audit-ready documentation; track remediation of identified gaps.
• Oversee cybersecurity service delivery to fulfill contractual commitments and address service gaps with accountability.
• Determine deliverables across Essentials, Core, Enterprise, and Advanced service tiers based on client requirements.
• Ensure delivery of Cyber Posture Snapshots, Health Checks, remediation, NIST CSF maturity scoring, and annual summaries.
• Lead executive client strategy meetings and serve as escalation point for complex cybersecurity and risk management concerns.
• Communicate security findings and remediation priorities to technical and nontechnical stakeholders.
• Collaborate with security operations on incident response, vulnerability management, and remediation activity; ensure client communication.
• Support pre‑sales engagements and opportunities to expand client security programs.
• Oversee annual backup recovery testing and business continuity guidance.
• Serve as liaison between Cyber74 and Kinetix on cybersecurity guidance.
• Provide coaching and potential leadership to Security & Compliance Analysts as the team grows.

Skills

NIST CSF

CIS Controls

SOC 2

HIPAA

PCI-DSS

CMMC

ISO 27001

GRC platforms

Vendor risk management

Audits & evidence management

Executive communication

Risk assessment

SIEM

Endpoint security

CrowdStrike

ThreatLocker

Cisco Secure Connect

Cisco Meraki

OpenDNS

Jamf MDM

Microsoft Intune

Azure

OneLogin

Okta

AI governance

Bachelor's degree in IS/IT

Education

Bachelor's degree in Information Security/Information Technology or related field

Tools

GRC platforms

Job description

Your application will be read by an actual person who’s excited to discover the real you. At Kinetix, a New Charter Company, we are seeking a Cybersecurity and Compliance Manager in a remote, United States-based role (in other companies this person could hold the title of Senior Cybersecurity Compliance Manager, Cybersecurity Risk and Compliance Manager, Information Security Compliance Manager) to lead cybersecurity compliance programs, risk management initiatives, and strategic security advisory services for clients.

This is a remote position based in the United States.

In this role, you will serve as a senior compliance expert within the Cybersecurity Services (CSS) team, partnering with clients, executive leadership, security operations, and internal analysts to strengthen security programs and meet contractual obligations. You will lead multi-framework compliance initiatives using standards such as NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001 while providing vCISO advisory services, audit guidance, and executive‑level risk reporting. You will also guide and coach members of the security and compliance team as the organization grows.

Lead cybersecurity compliance initiatives, including risk assessments, policy development, audit preparation, evidence collection, and ongoing compliance monitoring across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI‑DSS, CMMC, and ISO 27001.

Conduct compliance gap assessments, framework crosswalks, maturity evaluations, and remediation tracking to strengthen client security programs.

Oversee the Security Program Platform and associated governance, risk, and compliance processes.

Manage internal and client risk assessments, cyber insurance questionnaires and renewals, third‑party risk management, and vendor security due diligence.

Provide vCISO advisory services, including security strategy, roadmaps, investment planning, and executive and board‑level reporting.

Guide clients and internal stakeholders on responsible AI adoption, including AI governance, acceptable‑use policies, data protection, and emerging security risks.

Maintain security policies, procedures, and audit‑ready documentation while ensuring identified gaps are tracked through remediation.

Oversee Cybersecurity Services delivery to ensure contractual security commitments are fulfilled and service gaps are addressed with clear accountability.

Determine applicable cybersecurity deliverables across Essentials, Core, Enterprise, and Advanced service tiers based on client requirements, endpoint counts, compliance obligations, and risk profiles.

Ensure consistent delivery of Cyber Posture Snapshots, Continuous Health Checks, managed remediation, NIST CSF maturity scoring, and annual security summaries.

Lead executive client strategy meetings and serve as the escalation point for complex cybersecurity, compliance, and risk management concerns.

Communicate security findings, business risks, remediation priorities, and strategic recommendations to technical and nontechnical stakeholders.

Collaborate with security operations teams on incident response, vulnerability management, and remediation activities, ensuring appropriate client communication and compliance follow‑up.

Support pre‑sales engagements, cybersecurity service recommendations, and opportunities to expand client security programs.

Oversee annual backup recovery testing and provide business continuity and disaster recovery guidance.

Serve as the primary liaison between Cyber74 and Kinetix on cybersecurity and compliance guidance.

Provide guidance, coaching, and potential direct leadership to Security & Compliance Analysts and Security Success Analysts as the team expands.

Requirements

• 8+ years of experience in information technology, cybersecurity, information security governance, risk management, or regulatory compliance.
• Strong working knowledge of cybersecurity and compliance frameworks, including NIST CSF, CIS Controls, SOC 2, HIPAA, PCI‑DSS, CMMC, and ISO 27001, with experience supporting audits, evidence management, and compliance assessments.
• Demonstrated experience conducting cybersecurity risk assessments, managing third‑party and vendor risk, supporting cyber insurance assessments, and using GRC or compliance automation platforms.
• Strong client‑facing communication, analytical, and organizational skills, with the ability to advise executive stakeholders, manage multiple engagements, and evaluate security controls across Windows, macOS, cloud, networking, and identity environments.
• Additional professional certifications such as CISM, CISA, or other relevant cybersecurity and compliance credentials.
• Previous leadership experience managing teams, projects, client engagements, or cybersecurity advisory programs.
• Experience working in a managed service provider (MSP), managed security service provider (MSSP), or consulting environment delivering vCISO or cybersecurity advisory services.
• Experience with security operations, incident response, vulnerability management, SIEM platforms, and endpoint security technologies.
• Familiarity with CrowdStrike, ThreatLocker, Cisco Secure Connect, Cisco Meraki, OpenDNS, Jamf MDM, Microsoft Intune, Azure, OneLogin, and Okta.
• Experience with AI governance, security policies, and emerging AI‑related risks, along with a bachelor's degree in Information Security, Information Technology, or a related field, or equivalent professional experience.
• Strategic thinker who can balance long‑term cybersecurity planning with hands‑on execution.
• Passionate about technology, cybersecurity, and continuous improvement.

At New Charter, we’re building a caliber of business the IT industry hasn’t yet seen. We are serving small‑to‑medium sized businesses in 10+ industries across North America, and we deliver best‑in‑class technology solutions to propel our clients into the digital world.

We are constantly seeking a diverse candidate backgrounds and perspectives to amplify inclusive hiring practices for each job opening. Every application submitted through Workday is reviewed by a real person, not an AI. We’re the architects of change, fostering an environment where bold ideas take flight, and creativity knows no bounds. Our foundation is based on the belief that each team member plays a crucial role in our collective success.

New Charter recruits, employs, trains, compensates, and promotes regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.