Cybersecurity and Compliance Manager

newchartertech; United States; Remote; USD 108,000 - 132,000; Full time

Job summary

New Charter Tech is seeking a senior cybersecurity leader to direct governance, risk, and compliance for client organizations. You will guide framework-based assessments, audits, remediation, and executive risk reporting while shaping security strategy across engagements.

As a remote, United States-based role, you will collaborate with client teams, lead advisory engagements, and oversee security program delivery, incident response, and third-party risk management to drive maturity and

Qualifications

• Deep experience in cybersecurity governance, risk, and compliance across multiple frameworks.
• Ability to lead client-facing advisory engagements and communicate risks to executives.
• Practical knowledge of assessments, evidence collection, and remediation tracking.
• Coordinate security operations, stakeholders, and client teams to meet obligations.

Responsibilities

• Direct compliance programs across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001.
• Identify control gaps, map requirements, and track remediation through completion.
• Manage risk reviews, cyber insurance questionnaires, third-party assessments, and vendor due diligence.
• Advise clients as a virtual security leader with security roadmaps and investment plans.
• Guide responsible AI governance, including data protection and acceptable-use policies.
• Oversee service delivery and coordinate with security operations on incidents and communications.

Skills

Governance & compliance

Risk management

Regulatory frameworks

Client advisory

Executive communication

Leadership

Job description

Role overview

Lead cybersecurity governance, risk, and compliance work for client organizations, helping them meet regulatory and contractual obligations while improving security maturity. The role combines framework-based assessments, audit and remediation oversight, executive advisory work, and leadership across a client-facing security services team.

Responsibilities

• Direct compliance programs across frameworks such as NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001, including assessments, policies, audit preparation, evidence collection, and ongoing monitoring.
• Identify control gaps, map requirements across frameworks, assess maturity, and track remediation through completion.
• Manage internal and client risk reviews, cyber insurance questionnaires, third-party assessments, and vendor due diligence.
• Advise clients as a virtual security leader by developing security strategies, roadmaps, investment plans, and executive or board-level risk reports.
• Guide responsible AI governance, including acceptable-use policies, data protection, and emerging security concerns.
• Oversee service delivery and security commitments; coordinate with security operations on incidents, vulnerabilities, remediation, and client communications.

Requirements

• Deep experience in cybersecurity governance, risk, and compliance, including work across multiple security frameworks.
• Ability to lead client-facing advisory engagements and communicate technical risks and remediation priorities to executive and technical audiences.
• Practical knowledge of security assessments, audit evidence, policy maintenance, and remediation tracking.
• Ability to coordinate security operations, compliance stakeholders, and client teams to meet agreed obligations.
• Strong leadership and coaching skills for guiding analysts and supporting consistent service delivery.

Benefits and work setup

This is a remote role based in the United States. Compensation is expected to start at $120,000; the offer may vary based on experience and expertise.