Compliance

Compliance Cybersecurity Jobs

6 jobs found

8d ago

IT and Cybersecurity Regulatory Response Lead

Northwestern Mutual Milwaukee, WI

Milwaukee, WI

8d ago

$119k - $205k/yr Full time Manager Compliance Data Security

Apply Now

Job Description

Northwestern Mutual invites you to join a benefits-forward culture that prioritizes flexibility, support, and professional growth. Flexible work schedules, a concierge service, comprehensive benefits, and active employee resource groups create a balanced environment for a role that drives critical regulatory programs. This onsite position in Milwaukee leads the second-line IT SOX/MAR program and cybersecurity regulatory response, collaborating with IT control owners, controllership, and auditors to build an automated, continuous controls assurance program powered by ServiceNow.

Location: Milwaukee, Wisconsin on site

Salary: USD 118,960 - 205,200 per year

Geographic pay structure:

Structure 110: 130,880 - 196,320 USD
Structure 115: 136,800 - 205,200 USD

Responsibilities

Own and steer the second-line IT SOX/MAR program, contributing directly while guiding junior members of the second-line IT SOX/MAR team.
Serve as the primary accountable stakeholder for a unified program that covers IT SOX/MAR requirements and state cybersecurity regulations, including New York DFS Part 500, California Privacy Act Article 9, and Wisconsin Insurance Data Security Law.
Represent IT SOX/MAR and cybersecurity regulatory needs within IT GRC and cybersecurity efforts to build an automated continuous controls assurance program using a unified data platform and ServiceNow.
Develop relationships with first-line IT teams responsible for in-scope applications and infrastructure, providing guidance and collaboration.
Articulate technical positions and align with third-line auditors on scoping rationale, control coverage, and IT process conclusions in areas with findings, expanding involvement across other cybersecurity and regulatory programs over time.
Identify and manage dependencies between business process and accounting components of the IT SOX/MAR program and the IT program, including segregation of duties, IT application scoping, and risks from interfaces between in-scope systems.
Automate and enhance IT SOX/MAR processes, with an eye toward future system development and data engineering capabilities to support evolving program needs.

Requirements

Bachelor’s degree in MIS, Accounting, Business, or a related field, or equivalent relevant experience.
8 to 12 years of experience in information systems, systems audit, IT controls, or a related technology risk and compliance discipline; 6 to 8 years in technology risk, IT audit, or regulatory compliance within public accounting, consulting, or professional services is preferred.
Technical understanding of IT SOX/MAR program design.
Experience building or enhancing regulatory compliance programs; financial services industry experience is a plus.
1 to 2 years of people leadership experience.
Strong relationship management, influence, communication, negotiation, and professional judgment skills.
Proven ability to independently identify and resolve critical and complex issues through effective problem solving.
Ability to operate effectively in ambiguous situations and bring structure to complex work.

Technologies

ServiceNow

Benefits

Flexible work schedules
Concierge service
Comprehensive benefits
Employee resource groups

Find Your Future

Flexible work schedules
Concierge service
Comprehensive benefits
Employee resource groups

View full job page →

10d ago

Principal Information Security Analyst

FM Johnston, RI

Johnston, RI

10d ago

$121k - $173k/yr Full time Senior Cis Controls Compliance

Apply Now

Job Description

Lead FM's global cybersecurity regulatory compliance program by assessing requirements and translating them into actionable controls while collaborating across security, technology, risk, legal, and business teams to ensure regulatory alignment.

Responsibilities

Oversee the full spectrum of the cybersecurity regulatory compliance function, including governance, processes, tools, and reporting.
Coordinate responses to regulatory examinations, client security questionnaires, and other external information requests; work with Information Security, IT, Risk, Legal, and business stakeholders to collect, validate, and deliver accurate, audit-ready responses aligned to FM's control environment.
Monitor global cybersecurity regulations, standards, and guidance; conduct impact assessments to determine applicability and required changes to FM's controls.
Lead regulatory gap analyses and control evaluations; partner with technical and business teams to define remediation actions, track progress, validate closures, and escalate risks as needed.
Develop and maintain metrics, dashboards, and reporting on compliance posture, risk, and trends; provide concise updates to senior leadership and governance committees.
Serve as a trusted advisor on regulatory and compliance matters across IT, security, and business units; guide control design, risk treatment, and regulatory alignment to FM’s risk appetite.
Identify opportunities to improve program efficiency, automation, and maturity; implement leading practices in regulatory compliance, controls management, and assurance.
Lead complex initiatives and direct cross-functional contributors; promote accountability, transparency, and continuous improvement.

Requirements

Minimum 8 years in cybersecurity, information security, cyber risk, audit, or regulatory compliance; global experience preferred.
Experience applying frameworks such as NIST CSF 2.0 and CIS v8.1, including mapping controls to regulations and using a risk-based approach to solve problems.
Hands-on experience responding to regulatory exams, audits, or client security assessments, including evidence collection, control mapping, and response coordination.
Experience supporting IT general controls (ITGC) or cybersecurity control audits; understanding audit expectations, testing approaches, and evidence requirements.
Familiarity with global regulatory requirements across regions (APAC, EU, US) and regulatory bodies like APRA, IRDAI, OFSI, MAS.
Proven ability to identify control gaps, assess compliance, and support remediation tracking.
Strong problem-solving and analytical abilities to interpret regulatory requirements and apply them in a practical, risk-based manner.
Ability to develop and maintain clear, accurate, audit-ready control documentation and supporting evidence.
Outstanding stakeholder management and collaboration across Information Security & Risk Management, IT, Risk, Legal, and business teams.
Excellent verbal and written communication skills; translate technical security concepts into clear responses for regulators, clients, and business stakeholders.
Strong organizational and time management skills; manage multiple concurrent requests and deadlines.
Ability to work independently, prioritize competing demands, and deliver high-quality outputs with minimal supervision.
Bachelor's degree in information security, computer science, information technology, or a related field; consideration given to relevant experience.
Certifications such as CISA or CISM are preferred.

Technologies

Technologies used: NIST CSF 2.0, CIS v8.1.

Benefits

Incentive plan
Medical, dental, and vision insurance
Life and disability insurance
Well-being programs
401(k) and pension plan
Career development opportunities
Tuition reimbursement
Flexible work
Time off, including vacation and sick time

Schedule & Location

On-site work is required one day per week at the Corporate Headquarters, with flexibility to be on-site as needed by business demands.
Relocation is not offered for this position.

View full job page →

23d ago

Cybersecurity and Data Protection Associate General Counsel

Booz Allen Hamilton McLean, VA

McLean, VA

23d ago

$163k - $303k/yr Full time Cloud Platforms Cloud Technology Compliance

Apply Now

Job Description

Legal Associate General Counsel based in McLean, VA, onsite, focusing on cybersecurity compliance, information and cloud security, and incident response within a regulated government-facing environment.

Responsibilities

Provide legal guidance on Booz Allen's cybersecurity program, counseling on compliance with regulatory requirements and frameworks such as NIST, CMMC, FedRAMP, FAR, and DFARS, and advising on secure cloud deployments and governance.
Collaborate with Enterprise Cybersecurity to assess controls and governance frameworks, including identity and access management, logging and monitoring, endpoint protection, and vulnerability management.
Advise on incident response processes, standards, and playbooks; serve as the legal advisor for incident response, coordinating with investigations, reporting, and remediation efforts.
Counsel on cybersecurity requirements for third party service providers, vendor oversight, and technical integrations.
Provide guidance on cybersecurity considerations for client-facing solutions, products, and go-to-market activities.
Educate internal stakeholders on cybersecurity legal and compliance risks, regulatory expectations, and best practices.

Requirements

7+ years of experience with a law firm or in-house focus on cybersecurity, compliance, cloud, incident response, or data protection.
Experience advising on NIST, CMMC, FedRAMP, FAR, or DFARS frameworks and requirements.
Experience supporting cybersecurity compliance programs, audits, assessments, or remediation efforts.
Experience advising on incident response, investigations, and reporting obligations.
Experience counseling on cloud security and technology deployments.
Ability to manage multiple priorities in a fast-paced environment.
Ability to translate complex legal requirements into practical business guidance.
J.D. degree.

Technologies

NIST
CMMC
FedRAMP
FAR
DFARS

Benefits

Health benefits
Life benefits
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care

Nice If You Have

Experience with federal government contracts
Experience with cloud governance or secure system deployment in regulated environments
Experience with privacy, data governance, AI governance, or crisis management
Experience supporting market-facing technology or product teams
Experience working with engineers, security teams, architects, or developers

Compensation

Salary is determined by location, education, knowledge, skills, competencies, experience, contract affordability, and organizational requirements.
Projected compensation range for this position is $162,800.00 to $303,000.00 USD annually; this range is typical for Booz Allen’s total compensation package.
This posting will close within 90 days from the posting date.

Identity Statement

As part of the hiring process, you may be asked to complete an identity verification process using advanced biometrics and artificial intelligence to ensure authenticity and prevent identity fraud. Interviews and assessments may require on-camera participation, and Booz Allen may capture a photo to verify identity.

Candidate AI Usage Policy

AI is part of Booz Allen's daily operations, and the company supports responsible use of AI tools while maintaining a fair candidate process based on your own skills and knowledge. The use of AI or other tools to assist with interview responses is prohibited unless explicit permission is provided.

Work Model

Remote: Roles labeled remote may require occasional in-person work at Booz Allen or customer facilities.
Hybrid: Roles labeled hybrid require frequent work from a Booz Allen facility and may involve visits to customer facilities.
Onsite: Roles labeled onsite are performed primarily at a Booz Allen office or customer facility, with in-person collaboration as needed.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

View full job page →

1mo ago

Trade Compliance, Contracts, and Cybersecurity Manager

Kensington Electronics, Inc. Austin, TX

Austin, TX

1mo ago Closed

$80k - $115k/yr Full time Manager Cmmc Controls Compliance

This position is no longer accepting applications (closed Jul 30, 2026).

Job Description

This role oversees trade compliance, contracts, and cybersecurity controls for Kensington Electronics' electronics distribution business.

Responsibilities

Assess incoming customer purchase orders, terms and conditions, and flow-down requirements prior to order acceptance.
Spot and escalate clauses tied to CMMC, CUI, cybersecurity, indemnification, insurance, penalties, data rights, and other obligations the organization cannot or will not accept.
Support programs for CMMC, NIST SP 800-171, and Controlled Unclassified Information handling.
Assist with ITAR related compliance and export control data handling where applicable.
Perform restricted party and denied party screening on customers, buyers, vendors, and other counterparties.
Complete customer surveys, vendor onboarding surveys, compliance questionnaires, and related onboarding documentation.
Collaborate with sales, purchasing, operations, finance, quality, and leadership to manage compliance risk and contractual exposure.
Maintain organized compliance records and support practical internal cybersecurity controls.

Requirements

5+ years of experience in trade compliance, contract review, customer compliance, cybersecurity compliance, export controls, or related risk management.
Direct experience with CMMC and CUI compliance requirements.
Direct experience with ITAR regulations.
Experience reviewing customer terms, flow-down clauses, or contract requirements.
Experience performing denied party or restricted party screening.
Strong documentation, organizational, and follow-through skills.
Sound judgment with the ability to escalate risk appropriately.

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Health savings account
Life insurance
Paid time off
Vision insurance

Preferred Qualifications

Experience in electronics distribution, aerospace or defense supply chains, or other regulated distribution environments
Experience in a small to mid-sized business with broad, hands-on responsibilities
Working knowledge of NIST SP 800-171
Experience with customer surveys, vendor onboarding forms, and compliance questionnaires

Ideal Candidate

Fits best in a distributor setting with practical business compliance awareness
Detail-oriented, confident interpreting contractual requirements, and comfortable escalating risk
Experienced with CMMC, CUI, ITAR, and restricted party screening

Application Questions

Do you have direct hands-on experience with CMMC compliance requirements?
Do you have direct hands-on experience with Controlled Unclassified Information handling requirements?
Do you have direct hands-on experience with ITAR regulations?
Have you reviewed customer terms and conditions, flow-down clauses, or contract requirements for compliance or business risk?
Have you performed denied party or restricted party screening using U.S. government databases?
Do you have experience in a regulated distributor, aerospace/defense, or customer-driven compliance environment?

Work Location

In person
Onsite in Austin, TX

Pay

USD 80,000 - 115,000 per year

View full job page →

1mo ago

Manager IT-Cybersecurity Compliance

Sentara Hospitals Beach, GA

Beach, GA

1mo ago Closed

Full time Manager Compliance Compliance Programs

This position is no longer accepting applications (closed Jul 23, 2026).

Job Description

A concise context for the role at Sentara Hospitals, onsite in Beach, GA, overseeing the cyber security compliance program.

Responsibilities

Direct a team of cyber security compliance professionals to measure adherence to internal and external control requirements.
Own the cyber security compliance strategy and programs, including regulatory audits, compliance management, controls testing, medical device security, and metrics and risk indicators.
Maintain knowledge of key security and compliance frameworks and regulations such as HIPAA, HICP 405(d), NIST SP 800-171, SOC 2, ISO 27001, and applicable laws.
Oversee initiatives to ensure control effectiveness in line with laws, regulations, and internal policies.
Monitor activities in assigned IT areas to verify policy and standard compliance.
Contribute to the design and rollout of new business initiatives requiring compliance functionality to support ongoing compliance needs.
Advise business units on compliance and security matters and lead investigations when required.
Coordinate audit tasks to prepare managers and teams for audits and drive corrective actions ownership and timely remediations.
Lead continuous improvement efforts to reduce risk, enhance compliance, lower costs, and improve IT process quality.
Update and refine existing policies to reflect evolving requirements.

Requirements

7+ years in a cyber security management role, preferably in Governance, Risk or Compliance; without a Bachelor's Degree (Required)

Technologies

ServiceNow
Archer

Benefits

Medical, Dental, Vision plans
Adoption, Fertility and Surrogacy Reimbursement up to $10,000
Paid Time Off and Sick Leave
Paid Parental & Family Caregiver Leave
Emergency Backup Care
Long-Term, Short-Term Disability, and Critical Illness plans
Life Insurance
401k/403B with Employer Match
Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
Student Debt Pay Down – $10,000
Reimbursement for certifications and free access to complete CEUs and professional development
Pet Insurance
Legal Resources Plan
Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met

Location

Beach, GA (onsite)

Work Shift

First (Days)

Certifications / Licensure

CISSP (Preferred)
CISM (Preferred)
CRISC (Preferred)
CISA (Preferred)

View full job page →

1mo ago

Manager IT-Cybersecurity Compliance

Sentara Hospitals Fostoria, KS

Fostoria, KS

1mo ago Closed

Full time Manager Compliance Compliance Monitoring

This position is no longer accepting applications (closed Jul 22, 2026).

Job Description

Benefits

Medical, Dental, Vision plans
Adoption, Fertility and Surrogacy Reimbursement up to $10,000
Paid Time Off and Sick Leave
Paid Parental & Family Caregiver Leave
Emergency Backup Care
Long-Term, Short-Term Disability, and Critical Illness plans
Life Insurance
401k/403B with Employer Match
Tuition Assistance – $5,250/year and discounted educational opportunities through Guild Education
Student Debt Pay Down – $10,000
Reimbursement for certifications and free access to complete CEUs and professional development
Pet Insurance
Legal Resources Plan
Annual discretionary bonus eligibility based on system eligibility criteria

Overview

The Manager – Cyber Security Compliance at Sentara Hospitals leads the team responsible for establishing and maintaining the cyber security compliance program for Sentara Healthcare. This onsite role in Fostoria, KS directs strategy, readiness assessments, and governance across regulatory, industry, and contractual requirements, with reporting to the Director of GRC to ensure alignment with Sentara Healthcare expectations.

Responsibilities

Lead a team of cyber security compliance professionals to measure adherence to a broad range of internal and external control requirements
Own cyber security compliance strategy, programs and related initiatives including regulatory audits, compliance management, controls testing, medical device security, metrics, and risk and performance indicators
Understand key security and compliance frameworks including HIPAA, HICP 405(d), NIST800-171, SOC2, ISO27001, and applicable laws
Manage compliance initiatives to ensure control effectiveness with laws, regulations, and internal policies
Monitor activities of assigned IT areas to ensure control assurance of internal policies and standards
Participate in development and implementation of new business initiatives involving compliance to support required functionality
Provide guidance to business functions on compliance and security matters and lead investigations
Coordinate audit-related tasks to ensure readiness for audit testing and facilitate corrective actions for ownership and timely remediation
Initiate improvement activities to reduce risk, ensure compliance, lower cost, and improve IT process quality
Refine and revise existing policies

Requirements

5+ years in a cyber security management role, preferably in Governance, Risk or Compliance with a Bachelor's Degree (Required)
7+ years in a cyber security management role, preferably in Governance, Risk or Compliance without a Bachelor's Degree (Required)

Technologies

Service Now
Archer

Certifications / Licensure

CISSP (Preferred)
CISM (Preferred)
CRISC (Preferred)
CISA (Preferred)

View full job page →

Compliance Cybersecurity Jobs

IT and Cybersecurity Regulatory Response Lead

Principal Information Security Analyst

Cybersecurity and Data Protection Associate General Counsel

Trade Compliance, Contracts, and Cybersecurity Manager

Manager IT-Cybersecurity Compliance

Manager IT-Cybersecurity Compliance

Get Compliance Cybersecurity Jobs alerts