Cybersecurity Compliance Program Manager

Interruptores de Mexico; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

Interruptores de Mexico is seeking a Cybersecurity Compliance Program Manager in Chicago to own the company’s compliance portfolio, including CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR and related requirements. You will translate requirements into practical controls and develop policies, templates, and evidence for ongoing audit readiness.

The role blends program leadership with hands-on execution across security domains, driving remediation, certification, and continuous improvement while

Qualifications

• Experience leading cybersecurity compliance programs and translating requirements into practical controls.
• Familiarity with CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR and related regulatory frameworks.
• Strong governance, risk, and audit readiness capabilities.

Responsibilities

• Own and execute the compliance portfolio end-to-end, with roadmaps, governance, and readiness routines.
• Draft and implement processes, policies, standards, control narratives, SSP content, and evidence packages.

Skills

Policy development

Risk management

Regulatory compliance

Program leadership

Communication

Education

Bachelor's degree in cybersecurity, information technology, computer science, engineering, risk management, or related field

Job description

Position Summary

Reporting directly to the Chief Information Security Officer (CISO), the Cybersecurity Compliance Program Manager is a hands-on, player-coach leader who owns the company's compliance portfolio, including CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, and other customer, contractual, regulatory, and industry requirements. This individual translates requirements into practical controls and personally creates or improves the processes, policies, procedures, standards, templates, and evidence needed for continuous audit readiness. The ideal candidate combines program leadership with direct execution across cybersecurity, infrastructure, applications, governance, and risk-setting direction while developing deliverables, resolving gaps, and driving implementation, certification, remediation, and continuous improvement.

Key Responsibilities

• Own, build, and execute the compliance portfolio: Lead applicable requirements and personally develop roadmaps, governance, workplans, milestones, accountability, and readiness routines-not only coordinate them.
• Create and maintain the compliance operating system: Draft and implement processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.
• Perform assessments and drive remediation: Lead audits and reviews; assess controls and evidence, document gaps, develop corrective actions, and validate sustainable closure.
• Design and operationalize technical controls: Translate requirements into implementable controls and work hands-on across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.
• Strengthen and automate controls: Develop or improve system baselines, identity and Microsoft 365 reviews, network hardening, allowlisting, configuration management, SIEM use cases, scripts, and automated evidence and remediation workflows.
• Lead cross-functional execution: Coordinate global technology, manufacturing, legal, contracts, audit, procurement, and business teams while creating missing deliverables and removing barriers.
• Manage third-party obligations: Track supplier and subcontractor compliance and advise management on CMMC and contractual flow-down requirements.
• Report, improve, and prepare: Provide executives with clear readiness and risk metrics, monitor regulatory change, maintain incident response plans, and reinforce compliance ownership through guidance and awareness.

Required Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.
• Hands-on ownership of cybersecurity compliance or complex enterprise programs, including personally creating and implementing processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.
• Demonstrated experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements associated with government, defense, regulated, or export-controlled information.
• Broad, hands-on experience across infrastructure, networks, Linux and Windows, Active Directory, Microsoft 365, cloud, endpoints, applications, identity, vulnerability management, logging and SIEM, incident response, and third-party risk.
• Hands-on experience with control design and testing, secure configuration, technical assessments, SSPs, policy and procedure development, audit evidence, and corrective actions.
• Strong program management, analytical, communication, and executive presentation skills, with the ability to lead through influence in a matrixed, global organization.

Preferred Qualifications

• Experience in a global manufacturing company, including plants, operational technology, engineering, product development, and complex supply chains.
• Experience harmonizing multiple frameworks through a common control model and using GRC, ticketing, evidence-management, SIEM, configuration-management, and compliance-automation tools.
• Relevant certification such as CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or PMP.

Leadership and Success Measures

Hands-on ownersh