Security Compliance Project Manager (Cybersecurity)

TL;DR

Security Compliance Project Manager (Cybersecurity): Driving end-to-end execution of security assessments and compliance frameworks for large technology enterprises with an accent on risk management and regulatory alignment. Focus on validating compliance through technical evidence, managing risk registers, and integrating security controls into engineering workflows.

Location: Remote, must reside in one of the following US states: Alabama, California, Colorado, Georgia, Iowa, Maryland, Michigan, Minnesota, Mississippi, Missouri, New Jersey, New York, North Carolina, Oregon, Pennsylvania, South Carolina, Texas, Utah, Virginia, or Washington. Collaboration with Pacific time zone is essential.

Salary: $95,000–$105,000 per year

Company

A consulting firm specializing in helping the largest enterprises in the technology industry define, manage, benchmark, and market their solutions and services.

What you will do

• Execute end-to-end security assessments, including questionnaire creation, risk identification, and risk scoring.
• Maintain risk registers and create risk dashboards using Power BI for leadership reporting.
• Track implementation of security requirements across engineering teams and drive the compliance sign-off process.
• Develop strategies and roadmaps for cybersecurity certifications and regulatory requirements to support audits.
• Collaborate with Windows engineering teams to review feature designs for regulatory impact and compliance controls.
• Translate Cyber EO/CRA requirements into implementable controls, test procedures, and release gates.

Requirements

• 5+ years of Program Management experience.
• Must reside in one of the specified US states.
• Strong understanding of enterprise/on-prem Windows security (Active Directory, Group Policy, hardening).
• Experience with vulnerability management, CVSS scoring, and remediation SLAs.
• Knowledge of software supply chain security aligned to NIST SSDF, including SBOMs and code signing.
• Ability to work with GRC tools and integrate evidence workflows with engineering systems like ADO/Jira.

Nice to have

• Familiarity with cybersecurity, risk management, and audit best practices.
• Experience influencing stakeholders and senior leaders without direct authority.

Culture & Benefits

• Commitment to diversity, equity, and inclusion as a Minority/Women-owned Business Enterprise.
• Well-rounded benefits package including health insurance and a flexible spending account.
• Life and disability insurance.
• Paid time off and retirement plan investing.