Manager Cyber Assessment, Federal IT Compliance Issues Manager

KPMG US; Baltimore (MD); Remote; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Manager for Cyber Assessment specializing in Federal IT Compliance. This remote role is pivotal in leading federal IT compliance and cybersecurity assessments. You will collaborate with stakeholders to address compliance findings, manage corrective action plans, and ensure that all control objectives are met. The ideal candidate will have extensive experience in IT Security, a strong grasp of NIST frameworks, and excellent communication skills. Join a dynamic team where your expertise will drive significant improvements in federal IT compliance and cybersecurity.

Qualifications

• 5+ years of experience in IT Security or IT Compliance/Audit.
• Familiarity with NIST frameworks and compliance controls.

Responsibilities

• Collaborate with stakeholders to remediate IT compliance findings.
• Review evidence for CMMC assessments and manage corrective actions.

Skills

IT Security

IT Compliance

NIST 800-53

NIST 800-171

FedRAMP

CMMC

Organizational Skills

Communication Skills

Troubleshooting Skills

Education

Bachelor's degree

CISM Certification

CRISC Certification

CISSP Certification

Job description

Manager Cyber Assessment, Federal IT Compliance Issues Manager

Join our team at KPMG US as a Manager Cyber Assessment, Federal IT Compliance Issues Manager. This remote role involves leading efforts in federal IT compliance and cybersecurity assessment.

Responsibilities:

1. Collaborate with stakeholders to remediate IT compliance findings, including updating or creating System Security Plans (SSPs), procedures, and CMMC documentation.
2. Review evidence for CMMC assessments to ensure control objectives are met and IT compliance gaps are addressed.
3. Drive corrective action plans through stakeholder discussions and manage relations.
4. Report on the progress of corrective actions and provide management with status updates.
5. Examine evidence for closing corrective actions, ensuring they meet control objectives and compliance gaps are addressed.

Qualifications:

• At least five years of recent experience in IT Security or IT Compliance/Audit, with familiarity in NIST 800-53, NIST 800-171, FedRAMP, or CMMC.
• Bachelor's degree from an accredited institution; certifications like CISM, CRISC, CISSP preferred.
• Knowledge of NIST frameworks, ISO, HITRUST, PCI, and other relevant controls.
• Ability to work independently within a short timeframe (1 month).
• Strong organizational, troubleshooting, communication skills, and ability to manage multiple projects.
• Authorized to work in the U.S. without sponsorship.

Additional details regarding salary, benefits, and legal compliance are included in the full job posting. The role is classified as mid-senior level, full-time, in the general business function.