Director, Federal Cyber Risk & Compliance

Gross, Mendelsohn & Associates, P.A.; Baltimore (MD); On-site; USD 180,000 - 240,000; Full time

Job summary

Gross Mendelsohn, a leading Mid-Atlantic CPA and advisory firm, seeks a Director of Cybersecurity Governance, Risk & Compliance to build and lead our cybersecurity and IT risk advisory capabilities. This senior role functions at the intersection of IT architecture, regulatory compliance, risk advisory, and executive leadership to advance the firm and its government contractor clients.

The Director will design, implement, and oversee enterprise cybersecurity programs, drive CUI compliance, and

Qualifications

• Experience designing and overseeing enterprise cybersecurity programs.
• Strong background in federal regulatory readiness and compliance.

Responsibilities

• Design and oversee cybersecurity frameworks aligned with NIST CSF, NIST SP 800-171, NIST SP 800-53, ISO 27001.
• Lead end-to-end CUI and federal compliance programs, including SSP and POA&M.
• Conduct regulatory gap assessments and develop remediation roadmaps.
• Advise on DFARS 252.204-7012 compliance and CMMC readiness.
• Prepare executives for audits and government inquiries.

Skills

Cybersecurity governance

Risk management

Regulatory compliance

Leadership

Tools

NIST CSF

NIST SP 800-171

NIST SP 800-53

ISO 27001

DFARS 252.204-7012

CMMC readiness

Job description

Gross Mendelsohn, a leading Mid-Atlantic CPA and advisory firm, seeks a Director of Cybersecurity Governance, Risk & Compliance to build and lead our cybersecurity and IT risk advisory capabilities. This senior role functions at the intersection of IT architecture, regulatory compliance, risk advisory, and executive leadership to advance the firm and its government contractor clients.

The Director will design, implement, and oversee enterprise cybersecurity programs, drive CUI compliance, and