Government Compliance Sr. Manager

Vertiv; Westerville (OH); On-site; USD 140,000 - 190,000; Full time

Job summary

Vertiv is seeking a Government Compliance Sr. Manager to ensure cloud and data center infrastructure meets federal mandates. You will drive ICD 705 SCIF security, GIDEP duties, and DPAS workflows across procurement, legal, engineering, and manufacturing teams.

You will oversee CMMC governance, ITAR/EAR considerations, and responses to DCMA/DCAA audits, while aligning with NIST 800-171 controls for sensitive data.

Qualifications

• Bachelor's degree in Cybersecurity, Supply Chain Management, Business Administration, Legal Studies or related field.
• 7+ years of progressive federal compliance experience (or 5+ years with Top Secret/SCI clearance and relevant certifications).
• Demonstrated GIDEP database administration, including identification, tracking, and reporting of hardware deficiencies and counterfeit alerts.
• Direct ICD 705 physical security management experience or coordination with FSOs for SCIF accreditation.
• Proven track record managing DPAS priority ratings and BAA/TAA country-of-origin certification workflows.
• Experience leading corporate responses to DCMA/DCAA federal infrastructure audits.

Responsibilities

• Monitor and enforce ICD 705 standards for SCIFs/SAPFs within data centers.
• Embed compliance into procurement workflows to vet subcontractors and vendors.
• Interface with Legal on contract reviews, risk assessments, and disclosures.
• Lead CMMC governance and alignment with NIST SP 800-171 controls for data centers.
• Oversee DPAS optimization and ensure flow-down requirements to partners.
• Audit BAA/TAA compliance and verify country-of-origin for critical components.
• Manage international compliance for OCONUS data center deployments.
• Lead responses to federal audits by DCMA and DCAA; maintain DFARS contractor systems.
• Drive cross-functional alignment to achieve shared compliance outcomes.

Skills

Federal compliance leadership

GIDEP administration

ICD 705 / SCIF experience

DPAS & BAA/TAA workflows

DCMA/DCAA audit experience

Cross-functional collaboration

NIST SP 800-171 controls

Education

Bachelor's degree in Cybersecurity, Supply Chain Management, Business Administration, Legal Studies or related field

Tools

GIDEP System

Job description

POSITION SUMMARY

The Government Compliance Sr. Manager ensures that our cloud and data center infrastructure meets strict federal procurement, supply chain, facility security, and cybersecurity mandates. This critical role protects the company's federal revenue streams by managing risks and developing standard operating procedures associated with CMMC, ICD 705 physical security, DPAS prioritization, BAA/TAA supply chains, GIDEP reporting, and OCONUS deployments.

RESPONSIBILITIES

Facility Security & ICD 705 Compliance

Monitor, implement, and ensure strict compliance with ICD 705 (Intelligence Community Directive 705) standards for Sensitive Compartmented Information Facilities (SCIFs) and Special Access Program Facilities (SAPFs) within data centers.

Oversee the physical and technical security construction profiles, ensuring alignment with ICD 705 Technical Specifications (Tech Specs) from initial design through formal accreditation.

Maintain comprehensive documentation, including Fixed Facility Checklists (FFCs) and Construction Security Plans (CSPs), for submission to the Accrediting Official (AO).

Cross-Functional Collaboration & Stakeholder Interface

Partner with Federal Sales and Business Development to review requests for proposals (RFPs) and ensure compliance feasibility before bid submission.

Embed compliance requirements into Procurement workflows to vet subcontractors and hardware vendors.

Advise Hardware Engineering on technical requirements for component qualification and design-in constraints.

Collaborate closely with Legal Counsel on contract review, regulatory risk assessments, and disclosure strategies.

Interface directly with Manufacturing teams to ensure production lines meet federal tracking and security baselines.

Supply Chain Integrity & GIDEP Responsibility

Serve as the designated corporate representative and administrator for the Government-Industry Data Exchange Program (GIDEP).

Monitor incoming GIDEP failure experience data, suspect counterfeit alerts, and diminishing source notices.

Author and submit official GIDEP alerts if counterfeit components or systemic equipment failures are found.

Lead root-cause investigations and implement material quarantine protocols for identified parts.

Cybersecurity & CMMC Governance

Lead data center operational alignment with CMMC 2.0 Level 2 and NIST SP 800-171 controls.

Partner with IT Security to safeguard Controlled Unclassified Information (CUI) across environments.

Manage systemic security gaps by documenting and tracking Plans of Action and Milestones (POAMs).

DPAS Optimization & Supply Chain Priority

Optimize standard operating procedures for DPAS rated orders to achieve compliance.

Enforce mandatory flow-down requirements to hardware vendors, subcontractors, and construction partners.

Resolve resource allocation conflicts between commercial projects and rated defense infrastructure orders.

Trade & Supply Chain Compliance (BAA/TAA)

Administer compliance verifications for the Buy American Act (BAA) and Trade Agreements Act (TAA).

Audit multi-tiered hardware supply chains to verify the country of origin for critical infrastructure components.

Implement strict component-tracking workflows to mitigate the risk of counterfeit or non-compliant hardware.

OCONUS Sales & Global Compliance

Oversee international compliance frameworks for OCONUS data center sales and material deployments.

Partner with trade legal teams to clear export licensing requirements under ITAR and EAR regulations.

Ensure overseas field engineering teams comply with localized defense regulations and Status of Forces Agreements (SOFA).

Audit & Contractor Business Systems

Lead corporate responses to federal infrastructure audits conducted by the DCMA and DCAA.

Maintain continuous verification for relevant DFARS Contractor Business Systems used in pricing.

Author official corporate policy manuals governing strict federal data privacy and supply chain ethics.

Participate in FCL

Duties as required

MINIMUM QUALIFICATIONS

Bachelor's degree in Cybersecurity, Supply Chain Management, Business Administration, Legal Studies or related field.

7+ years of progressive federal compliance experience (or 5+ years with an active Top Secret/SCI clearance and relevant certifications such as CISSP or CCP).

Demonstrated GIDEP database administration, including identification, tracking, and reporting of hardware deficiencies and counterfeit alerts

Direct ICD 705 physical security management experience or coordination with Facility Security Officers (FSOs) for SCIF accreditation

Proven track record managing DPAS priority ratings and BAA/TAA country-of-origin certification workflows

Experience leading corporate responses to DCMA/DCAA federal infrastructure audits

Matrix-influence skills to align cross-functional teams (Sales, Engineering, Manufacturing, Legal) toward shared compliance outcomes

Strong technical acumen in data center power, cooling, and hardwa