Cybersecurity Compliance Lead

Jobgether; United States; On-site; USD 145,000 - 207,000; Full time

Benefits offered by this job

Equity grant

Medical, dental, and vision insurance

401(k) retirement plan

Disability insurance

Life insurance

Paid vacation

Paid holidays

Unlimited sick time

Parental leave

Remote work within US

Job summary

Jobgether seeks a Cybersecurity Compliance Lead in the United States to mature the organization’s security posture across federal frameworks and export-control data handling. This hands-on leader will drive compliance, risk assessments, and audits in collaboration with IT, Security, Legal, and facilities teams.

The role emphasizes CMMC readiness, RMF/ATO activities, and liaison work with government assessors. 8+ years in federal cybersecurity compliance and active clearance are highly valued.

Qualifications

• 8+ years of experience in cybersecurity compliance, information assurance, or a closely related field.

Responsibilities

• Own and mature the cybersecurity compliance program against NIST 800-171 and NIST 800-53.
• Liaise with government cybersecurity teams, assessors, sponsors, and security stakeholders during audits and accreditation.
• Develop and maintain System Security Plans, Plans of Action and Milestones, and supporting compliance documentation.
• Enforce controls for handling, storage, and protection of Controlled Unclassified Information.
• Ensure compliance with EAR and ITAR export-control requirements.
• Conduct risk assessments and drive remediation activities to closure.
• Collaborate with IT, Security, Engineering, and Legal to embed security requirements into systems and processes.
• Prepare the organization for third-party assessments and government accreditation efforts (CMMC readiness).
• Support RMF and ATO packages for sponsor-accredited systems.

Skills

Cybersecurity compliance

Risk management

Audit readiness

Education

CISSP

CISM

CAP

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cybersecurity Compliance Lead based in United States. As a Cybersecurity Compliance Lead, you will own and mature the organization’s cybersecurity compliance posture across critical federal security frameworks. You will play a central role in protecting Controlled Unclassified Information and export-controlled data while ensuring security requirements are embedded throughout the organization. The role combines compliance leadership, security assessments, risk management, government engagement, and audit readiness. You will serve as a key liaison to government cybersecurity teams, assessors, and sponsors and help prepare systems for accreditation efforts. Close collaboration with IT, Security, Engineering, Legal, and facility security stakeholders will be essential to driving effective controls and remediation. This is a hands-on, high-responsibility position for a proactive security professional who can operate independently and navigate complex federal requirements.

Accountabilities

• Own and continuously mature the cybersecurity compliance program against NIST 800-171 and NIST 800-53 requirements.
• Serve as the primary liaison with government cybersecurity teams, assessors, sponsors, and other security stakeholders during audits, reviews, and accreditation activities.
• Lead the development, maintenance, and continuous improvement of System Security Plans, Plans of Action and Milestones, and supporting compliance documentation.
• Establish and enforce appropriate controls for the handling, storage, transmission, and protection of Controlled Unclassified Information.
• Ensure systems, data, and personnel comply with applicable EAR and ITAR export-control requirements.
• Conduct security control assessments, gap analyses, and risk assessments and drive identified remediation activities through closure.
• Partner with IT, Security, Engineering, and Legal teams to incorporate cybersecurity compliance requirements into systems, workflows, and organizational processes.
• Prepare the organization for third-party assessments and government accreditation efforts, including CMMC readiness and certification activities.
• Support Risk Management Framework and Authorization to Operate packages for sponsor-accredited systems.
• Support compliance activities for classified information systems, including ISSM/ISSO-type responsibilities, in coordination with the Facility Security Officer.
• Identify opportunities to strengthen security controls and continuously improve compliance processes across the organization.

Requirements

• You have 8+ years of experience in cybersecurity compliance, information assurance, or a closely related field.
• You have demonstrated experience working directly with government cybersecurity teams and within organizations subject to federal security requirements.
• You have hands-on experience implementing and assessing NIST 800-171 and NIST 800-53 controls.
• You have practical experience handling and protecting Controlled Unclassified Information.
• You have working knowledge of EAR and ITAR export-control regulations and their application to systems, data, and personnel.
• You have experience developing and maintaining compliance artifacts such as System Security Plans and Plans of Action and Milestones.
• You hold an active U.S. security clearance, with TS/SCI preferred.
• You have hands-on Risk Management Framework experience, including Authorization to Operate package development, and familiarity with NISPOM and 32 CFR Part 117.
• You are proactive, dependable, and comfortable working with minimal supervision while taking ownership of complex compliance initiatives.
• Experience leading CMMC readiness or certification efforts is highly desirable.
• Experience supporting Department of Defense or other U.S. Government programs is a strong advantage.
• Familiarity with DFARS, FedRAMP, or CMMC requirements is beneficial.
• Relevant certifications such as CISSP, CISM, or CAP are preferred.

Benefits

• The base salary range for this role is $145,000–$207,000 USD.
• The compensation package includes a competitive equity grant.
• Medical, dental, and vision insurance are provided.
• A 401(k) retirement plan is available.
• Short-term and long-term disability insurance is provided.
• Life insurance coverage is included.
• New employees receive three weeks of paid vacation.
• Employees receive 12 paid holidays.
• Unlimited sick time is offered.
• Paid parental leave is available.
• The position may be worked remotely from an approved location within the United States.
• Final compensation is determined based on skills, qualifications, experience, and geographic location.