Cybersecurity Compliance Program Manager

Location: Chicago, United States of America; hybrid workplace

Salary: $104,400–$161,760 per year

Company

hirify.global is a diversified industrial technology manufacturing company headquartered in Chicago, serving industrial, transportation, and electronics markets worldwide with approximately 16,000 employees.

What you will do

• Own and execute the cybersecurity compliance portfolio covering CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, and other customer, contractual, regulatory, and industry requirements.
• Create and maintain processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.
• Lead audits and assessments, identify control and evidence gaps, develop corrective actions, and validate sustainable remediation.
• Design and operationalize controls across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.
• Improve baselines, Microsoft 365 and identity reviews, network hardening, allowlisting, SIEM use cases, scripts, and automated evidence and remediation workflows.
• Lead execution across technology, manufacturing, legal, contracts, audit, procurement, business, suppliers, and subcontractors while reporting readiness and risk metrics to executives.

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.
• Hands-on ownership of cybersecurity compliance or complex enterprise programs, including creation and implementation of processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.
• Experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements for government, defense, regulated, or export-controlled information.
• Hands-on experience across infrastructure, networks, Linux, Windows, Active Directory, Microsoft 365, cloud, endpoints, applications, identity, vulnerability management, logging and SIEM, incident response, and third-party risk.
• Experience with control design and testing, secure configuration, technical assessments, SSPs, policy and procedure development, audit evidence, and corrective actions.
• Strong program management, analytical, communication, and executive presentation skills, with the ability to lead through influence in a matrixed, global organization.

Nice to have

• Experience in a global manufacturing company involving plants, operational technology, engineering, product development, and complex supply chains.
• Experience harmonizing frameworks through a common control model and using GRC, ticketing, evidence-management, SIEM, configuration-management, and compliance-automation tools.
• CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or PMP certification.

Culture & Benefits

• Hybrid work environment with flexible work arrangements.
• Employee growth and development opportunities.
• Competitive compensation, benefits, and performance-based incentives.
• Collaborative culture guided by the principles of caring, customer success, and owning outcomes.