Cybersecurity and Compliance Manager

Greystone Technology Group; Washington (District of Columbia); Remote; USD 102,000 - 138,000; Full time

Benefits offered by this job

Health benefits

401(k) with company match

Learning and development support

Flexible work options

Job summary

Kinetix, a New Charter Technologies company, seeks a Cybersecurity and Compliance Manager to lead client risk assessments, policy development, and audit readiness in a remote U.S. role.

You will guide the CSS team on NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, ISO 27001 and provide vCISO advisory with strategic risk reporting.

Qualifications

• 8+ years in information technology, cybersecurity, governance, risk or compliance.
• Active CISSP certification in good standing.
• Experience with NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, ISO 27001.

Responsibilities

• Lead cybersecurity compliance initiatives across multiple frameworks.
• Perform risk assessments and remediation tracking for clients.
• Provide vCISO advisory services and executive risk reporting.
• Collaborate with security operations and client stakeholders to ensure compliance.

Skills

Cybersecurity governance

Risk management

Client-facing communication

Regulatory compliance

Executive-level reporting

Education

Bachelor's degree in Information Security / IT

CISM/CISA (preferred)

Tools

GRC platforms

SIEM

Vendor risk tools

Job description

We believe talent deserves a human touch. Your application will be read by an actual person who’s excited to discover the real you.At Kinetix, a New Charter Company, we are seeking a Cybersecurity and Compliance Manager in a remote, United States-based role (in other companies this person could hold the title of Senior Cybersecurity Compliance Manager, Cybersecurity Risk and Compliance Manager, Information Security Compliance Manager) to lead cybersecurity compliance programs, risk management initiatives, and strategic security advisory services for clients.This is a remote position based in the United States.In this role, you will serve as a senior compliance expert within the Cybersecurity Services (CSS) team, partnering with clients, executive leadership, security operations, and internal analysts to strengthen security programs and meet contractual obligations. You will lead multi-framework compliance initiatives using standards such as NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001 while providing vCISO advisory services, audit guidance, and executive-level risk reporting. You will also guide and coach members of the security and compliance team as the organization grows.To be successful in this role, you will combine deep cybersecurity governance, risk, and compliance expertise with strong client-facing leadership and practical technical knowledge. You will translate complex security risks into actionable recommendations, oversee consistent delivery of cybersecurity services, and help clients improve their security maturity through risk assessments, remediation planning, and continuous compliance monitoring. You will also collaborate with technical teams to ensure security commitments are fulfilled and client environments remain aligned with applicable regulatory and contractual requirements.General Job Duties Include:Lead cybersecurity compliance initiatives, including risk assessments, policy development, audit preparation, evidence collection, and ongoing compliance monitoring across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001.Conduct compliance gap assessments, framework crosswalks, maturity evaluations, and remediation tracking to strengthen client security programs.Oversee the Security Program Platform and associated governance, risk, and compliance processes.Manage internal and client risk assessments, cyber insurance questionnaires and renewals, third-party risk management, and vendor security due diligence.Provide vCISO advisory services, including security strategy, roadmaps, investment planning, and executive and board-level reporting.Guide clients and internal stakeholders on responsible AI adoption, including AI governance, acceptable-use policies, data protection, and emerging security risks.Maintain security policies, procedures, and audit-ready documentation while ensuring identified gaps are tracked through remediation.Oversee Cybersecurity Services delivery to ensure contractual security commitments are fulfilled and service gaps are addressed with clear accountability.Determine applicable cybersecurity deliverables across Essentials, Core, Enterprise, and Advanced service tiers based on client requirements, endpoint counts, compliance obligations, and risk profiles.Ensure consistent delivery of Cyber Posture Snapshots, Continuous Health Checks, managed remediation, NIST CSF maturity scoring, and annual security summaries.Lead executive client strategy meetings and serve as the escalation point for complex cybersecurity, compliance, and risk management concerns.Communicate security findings, business risks, remediation priorities, and strategic recommendations to technical and nontechnical stakeholders.Collaborate with security operations teams on incident response, vulnerability management, and remediation activities, ensuring appropriate client communication and compliance follow-up.Support pre-sales engagements, cybersecurity service recommendations, and opportunities to expand client security programs.Oversee annual backup recovery testing and provide business continuity and disaster recovery guidance.Serve as the primary liaison between Cyber74 and Kinetix on cybersecurity and compliance guidance.Provide guidance, coaching, and potential direct leadership to Security & Compliance Analysts and Security Success Analysts as the team expands.Required Experience:8+ years of experience in information technology, cybersecurity, information security governance, risk management, or regulatory compliance.Active CISSP certification in good standing.Strong working knowledge of cybersecurity and compliance frameworks, including NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, CMMC, and ISO 27001, with experience supporting audits, evidence management, and compliance assessments.Demonstrated experience conducting cybersecurity risk assessments, managing third-party and vendor risk, supporting cyber insurance assessments, and using GRC or compliance automation platforms.Strong client-facing communication, analytical, and organizational skills, with the ability to advise executive stakeholders, manage multiple engagements, and evaluate security controls across Windows, macOS, cloud, networking, and identity environments.Preferred Experience:Additional professional certifications such as CISM, CISA, or other relevant cybersecurity and compliance credentials.Previous leadership experience managing teams, projects, client engagements, or cybersecurity advisory programs.Experience working in a managed service provider (MSP), managed security service provider (MSSP), or consulting environment delivering vCISO or cybersecurity advisory services.Experience with security operations, incident response, vulnerability management, SIEM platforms, and endpoint security technologies.Familiarity with CrowdStrike, ThreatLocker, Cisco Secure Connect, Cisco Meraki, OpenDNS, Jamf MDM, Microsoft Intune, Azure, OneLogin, and Okta.Experience with AI governance, security policies, and emerging AI-related risks, along with a bachelor's degree in Information Security, Information Technology, or a related field, or equivalent professional experience.Preferred Attributes:Strategic thinker who can balance long-term cybersecurity planning with hands-on execution.Passionate about technology, cybersecurity, and continuous improvement.Highly organized, detail-oriented, process-driven, and self-motivated.Demonstrates integrity, discretion, accountability, and openness to feedback.Collaborative and consultative, with a service-oriented approach to improving outcomes for clients and team members.CompensationThe compensation is expected to start at $120,000. Our offer will be determined by multiple factors including candidate experience and expertise and may vary from the amount listed above.Who We AreKinetix, a New Charter Technologies company, is a fast-growing managed service provider supporting startups across the Bay Area, New York, and beyond.We’ve been named a Best Place to Work five times by the San Francisco Business Times, and we’re proud to be known for both the work we do and the way we support our people. From IT services to managed cybersecurity, our focus is simple. We help our clients grow, and we create an environment where our team can do the same.What It’s Like to Work HereAt Kinetix, growth is not just something we talk about, it is built into how we operate.We invest in our people through ongoing learning, regular feedback, and clear career paths. You will have the support, tools, and flexibility to do your best work, whether you are in the office or working remotely. Even in a distributed environment, we stay connected and make sure everyone feels part of the team.What We OfferWe are committed to supporting our team both professionally and personally. That includes comprehensive health benefits, retirement planning with employer match, learning and development support, and flexible work options.We also believe in creating a culture where people enjoy working together, with opportunities to connect through team events, recognition programs, and shared goals.Join UsIf you are looking for a place where you can grow your career, be supported by a strong team, and do meaningful work with innovative clients, we would love to connect.Kinetix, a New Charter Technologies company, is committed to creating an inclusive environment and is proud to be an equal opportunity employer. Kinetix, employs, trains, compensates, and promotes regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.