Compliance Program Manager
Posted 5hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Compliance Program Manager owning cybersecurity framework readiness and regulatory change management. Productizing, pricing, launching, and enabling sellable compliance service offerings for RSI Security.
Responsibilities:
- Own the organization-wide compliance framework calendar, tracking rule changes, standard revisions, program updates, and authorization requirements
- Maintain an obligations register mapping external requirements to internal owners, controls, artifacts, and evidence locations
- Drive readiness for new and renewing authorizations, accreditations, and program approvals
- Coordinate internal audits, surveillance activities, and external assessment cycles
- Track corrective actions, nonconformities, and findings through documented closure
- Monitor regulatory and standards bodies and issue impact analyses to leadership
- Maintain compliance documentation with version control, currency, and traceability
- Serve as the internal subject matter expert on framework requirements
- Escalate impartiality, independence, conflict-of-interest, and eligibility questions appropriately
- Evaluate emerging and revised frameworks for market opportunity and produce business cases
- Own productization of approved offerings, including scope, deliverables, methodologies, work breakdown structures, effort models, and quality gates
- Partner with Finance and Sales on pricing, rate cards, and margin targets
- Build delivery artifacts, templates, evidence requirements, and reporting formats
- Define staffing, credential, and technical-readiness requirements with TAC and delivery leadership
- Develop enablement materials for Sales, RFP, and delivery teams
- Own launch plans and post-launch reviews
- Maintain the offering portfolio and identify offerings for revision, repricing, consolidation, or retirement
- Partner with Marketing on messaging accuracy and technical claim review
- Track program and offering performance through weekly or monthly scorecard metrics
Requirements:
- At least 5 years of professional experience in cybersecurity compliance, GRC, assurance, accreditation, or regulatory program management
- Professional experience working with one or more of CMMC/NIST, FedRAMP, or ISO-based compliance programs
- Currently based in the United States and legally authorized to work in the United States
- Currently authorized to work for any employer in the United States on a full-time, ongoing basis without current or future employer immigration sponsorship
- Ability to satisfy background investigation, personnel eligibility, and access requirements that may apply to U.S. federal cybersecurity programs
- U.S.-citizen-only role
- Ability to read primary sources rather than relying on summaries or secondhand interpretation
- Ability to own outcomes without directly managing the people who produce them
- Ability to support recommendations with evidence
- Comfort working in requirements documents and pricing models
- Ability to write clearly for salespeople, project managers, and assessors
- Alignment with RSI's Core Values and commitment to quality



















