Cybersecurity Compliance Consultant

DOT Security; Lake Forest (IL); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

PTO & holidays

Parental leave

401(k) plan

Education reimbursement

Health benefits

Disability insurance

Job summary

DOT Security seeks a Cybersecurity Compliance Consultant (Virtual Compliance Manager) to perform gap analyses and advise clients on maintaining regulatory compliance. This on-site role requires engagement with clients, auditors, and stakeholders to design and adjust compliance plans based on evolving laws.

The candidate will monitor federal and state regulations, coordinate with client stakeholders, and lead initiatives to safeguard data, systems, and operations in a fast-paced environment.

Qualifications

• Client relationship management including listening, setting expectations, delivering results.
• Policy, process, and procedure writing and review concepts.
• Project management principles and techniques.
• Risk assessment methodologies and management processes including scoring and mitigation.
• Knowledge of supply chain risk management standards and practices.
• Ability to work independently and as part of a team.
• Adaptability to situations with incomplete data or no precedent.

Responsibilities

• Act as point of contact for client resources regarding reported compliance violations.
• Advise clients on appropriate use of compliance reporting tools and related technology.
• Assist external auditors and authorities with client compliance reviews and investigations.
• Develop a vision and roadmap for client compliance controls, processes, and risks.
• Monitor client compliance and modify plans as regulations change.
• Remain up-to-date on compliance laws, rules, and regulations.

Skills

Client relationship management

Policy writing

Project management

Risk assessment

Supply chain risk management

Independent work

Adaptability

Communication

Critical thinking

Documentation

Cybersecurity concepts

System administration

Disaster recovery

Ethics & integrity

Public Trust background check

Certifications awareness

Education

Relevant college degrees

GRCP, CRISC, Cyber-AB CCP, Cyber-AB CCA, IAPP CIPP/US, IAPP CIPM

Job description

Built on Trust. Driven by Protection.

DOT Security exists because businesses deserve a cybersecurity partner they can trust. As cyber threats became more sophisticated and disruptive, organizations needed more than technology; they needed experts who could help protect their people, operations, and livelihoods. Born from Impact Networking during a time when that need was rapidly growing, DOT Security was created to deliver a more proactive, personalized approach to cybersecurity.

What makes DOT special is that we've never lost sight of why we started. We exist to help organizations operate with confidence, while investing in talented people who are passionate about solving complex challenges and protecting what matters most. We've built something special, but we're far from finished. The people who join DOT today will help define what comes next.

Job Overview

A Cybersecurity Compliance Consultant, internally titled as a Virtual Compliance Manager, performs point-in-time Gap Analysis & advises clients on an ongoing basis to improve or maintain their adherence to regulatory compliance requirements. This involves continuously monitoring state & federal regulations & working with clients to proactively modify their compliance programs to accommodate new regulatory requirements as they take effect. Compliance program modification entails Compliance Consultant coordination with client stakeholders to design & analyze the impact of changes & modify compliance plans in a timely manner.

The Cybersecurity Compliance Consultant is not a remote position. This role is required to be on-site at the DOT Security- Security Operations Center.

Responsibilities

• Act as point of contact for client resources in relation to reported compliance violations

• Advise clients on appropriate use of compliance reporting tools and related technology

• Aid external auditors & authorities with client compliance reviews & investigations

• Assist with client business associate contract maintenance & respond if problems arise

• Develop a vision & roadmap for client compliance controls, processes, & risks

• Facilitate allocation of appropriate resources for effective compliance policy implementation

• Perform periodic gap analysis & ongoing compliance monitoring for client organizations

• Remain up-to-date on compliance laws, rules, & regulations & inform clients about changes

• Support the development & implementation of written compliance policies & procedures

• Track client compliance documents & support the filing of compliance reports as needed

• Act with a sense of urgency, identify alternatives, & set realistic timeframes for resolution

• Complete work based on priority, follow through as promised, & set expectations

• Contribute to & perform both new & pre-existing plans, instructions, & procedures

• Demonstrate active listening & critical thinking skills & comprehend received information

• Interpret & understand complex & evolving concepts in a dynamic, fast-paced environment

• Maintain awareness of technology advancements & their cybersecurity implications

• Understand & present technical concepts to non-technical audiences

• Provide exceptional customer service & remain calm under pressure

• Resolve problems in early stages & ticket labor, notes, & details in a ticketing system

Qualifications & Experience

• Client relationship management (listening, setting expectations, delivering results)

• Feedback interpretation for process, product, & service improvement

• Policy, process, & procedure writing & review concepts

• Project Management principles & techniques

• Risk assessment methodologies & management processes (scoring, mitigation)

• Supply chain risk management standards, processes, & practices

• Ability to work independently & as part of a team

• Adaptability to situations in which data is incomplete or where no precedent exists

• Communicate & collaborate in a clear, professional, & concise manner using technology, tools, & workspaces

• Critical thinking, customer service skills, & passion for cybersecurity

• Documenting & communicating complex technical concepts, incidents, problems, & events

• Knowledge of IT assets (apps/data/devices/networks/users) & related security concepts (monitoring/hardening)

• Preparation & delivery of reports, plans, & briefings using presentation technology

• System administration and cybersecurity theories, concepts, & methods

• System resiliency, redundancy, continuity, & disaster recovery concepts

• The ability to work ethically & with integrity

• Other Desire Attributes

• Public Trust background check (Limited Requirement)

• Relevant work experience in managed services industry

• Cyber community participation (conferences/groups/tool authoring/CTFs)

• Understanding of CIS Controls, CMMC, NIST 800-171, NIST 800-53, FedRAMP

• Relevant college degrees

• Certifications including GRCP, CRISC, Cyber-AB CCP, Cyber-AB CCA, IAPP CIPP/US, IAPP CIPM

Compensation

Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs.

DOT Security may offer applicable incentive compensation plans depending on role and/or department.

Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process.

Benefits We Take Pride In

• 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards

• Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave

• Development and growth opportunities with on-going training & continued education reimbursement

• 401(K) & retirement plans with complimentary financial advisory services

• Comprehensive health, disability, life, dental, and vision plans

Work Authorization & Immigration Sponsorship

Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements.

Certain positions within DOT Security may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a “U.S. Person,” as defined by law, or otherwise be eligible to obtain any required government authorizations.