Remote Cybersecurity & Compliance Leader

New Charter Technologies, LLC; Clayton (NM); Remote; USD 150,000 - 190,000; Full time

Job summary

New Charter Technologies, LLC is seeking a Cybersecurity and Compliance Manager for a remote, United States–based position. You will lead multi‑framework programs (NIST CSF, SOC 2, CIS Controls, HIPAA, PCI‑DSS, CMMC, ISO 27001), provide vCISO advisory services, and guide a growing security team across client engagements.

The role emphasizes executive communication, risk assessments, third‑party risk, and AI governance, with collaboration across security operations, governance, and clients to

Qualifications

• 8+ years of experience in IT, cybersecurity, information security governance, risk management, or regulatory compliance.
• Strong working knowledge of multiple frameworks (NIST CSF, CIS Controls, SOC 2, HIPAA, PCI‑DSS, CMMC, ISO 27001) with audits/evidence management.
• Experience conducting cyber risk assessments, third‑party/vendor risk, cyber insurance support, and using GRC platforms.
• Excellent client-facing communication, analytical, and organizational skills across Windows, macOS, cloud, networking, and identity environments.
• Professional certifications such as CISM, CISA, or other relevant credentials.
• Previous leadership experience guiding teams, projects, or cybersecurity advisory programs.
• Experience in MSP/MSSP or consulting delivering vCISO or advisory services.
• Experience with security operations, incident response, vulnerability management, SIEM, and endpoint security.

Responsibilities

• Lead cybersecurity compliance initiatives, including risk assessments, policy development, audit prep, evidence collection, and ongoing monitoring across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI‑DSS, CMMC, and ISO 27001.
• Conduct gap assessments, framework crosswalks, maturity evaluations, and remediation tracking to strengthen client security programs.
• Oversee the Security Program Platform and governance, risk, and compliance processes.
• Manage internal and client risk assessments, cyber insurance questionnaires/renewals, third‑party risk management, and vendor security due diligence.
• Provide vCISO advisory services with security strategy, roadmaps, and executive reporting.
• Guide clients on responsible AI governance, data protection, and emerging AI risks.
• Maintain security policies, procedures, and audit‑ready documentation; track gaps through remediation.
• Ensure Cybersecurity Services delivery meets contractual commitments and closes gaps with accountability.
• Determine deliverables across Essentials, Core, Enterprise, and Advanced tiers based on client requirements, endpoints, and risk.
• Deliver Cyber Posture Snapshots, Health Checks, remediation, NIST CSF maturity scoring, and annual security summaries.
• Lead executive strategy meetings and act as escalation point for complex cybersecurity, compliance, and risk issues.
• Communicate findings and remediation priorities to technical and nontechnical stakeholders.
• Collaborate with security ops on incident response, vulnerability management, and remediation communications.
• Support pre‑sales engagements and opportunities to expand client security programs.
• Oversee annual backup recovery testing and provide BC/DR guidance.
• Serve as liaison between Cyber74 and Kinetix on cybersecurity and compliance guidance.
• Provide leadership and coaching to Security & Compliance Analysts as the team grows.

Skills

NIST CSF

CIS Controls

SOC 2

HIPAA

PCI-DSS

CMMC

ISO 27001

vCISO advisory

Risk assessments

Third-party risk

AI governance

Leadership

Incident response

Endpoint security

Education

Bachelor's degree in Information Security/IT

Tools

CrowdStrike

ThreatLocker

Cisco Secure Connect

Cisco Meraki

OpenDNS

Jamf MDM

Microsoft Intune

Azure

OneLogin

Okta

Job description

New Charter Technologies, LLC is seeking a Cybersecurity and Compliance Manager for a remote, United States–based position. You will lead multi‑framework programs (NIST CSF, SOC 2, CIS Controls, HIPAA, PCI‑DSS, CMMC, ISO 27001), provide vCISO advisory services, and guide a growing security team across client engagements.

The role emphasizes executive communication, risk assessments, third‑party risk, and AI governance, with collaboration across security operations, governance, and clients to