Engineering Manager, RAAS | Compliance Advisory and Automation Services

Engineering Manager, RAAS | Compliance Advisory and Automation Services

Join Aprio's Risk Advisory and Assurance Services (RAAS) team and you will help clients maximize their opportunities. Aprio Advisory Group, LLC is a progressive, fast-growing firm looking for an Engineering Manager, RAAS | Compliance Advisory and Automation Services to join their dynamic team.

We are seeking an experienced technical manager to lead our cloud security consultants serving small to enterprise organizations across the Defense Industrial Base. This manager role will guide our consultants who are assisting our clients through their CMMC Level 2 certification journey while ensuring our consultants have the right leadership support.

Compliance Consulting:

• Support proposal development as a technical SME by identifying solutions, estimating time and resources, and participating in discovery and scoping.
• Prepare organizations for C3
  
  PAO assessments and provide certification readiness reviews.
• Develop customized remediation roadmaps scaled to client size, budget, and technical capabilities.
• Manage resource allocation and workload distribution across concurrent client engagements

Cloud Security Solutions consulting:

• Design right-sized Microsoft, AWS or GCP security solutions appropriate for small business through enterprise clients.
• Implementation knowledge of Microsoft security solutions like Defender, Purview, Sentinel etc..
• Guide clients on Azure Government vs. commercial cloud decisions based on CMMC requirements

Team Leadership & Practice Development:

• Build and mentor a team of 4-6 security consultants with diverse skill sets and experience levels.
• Develop standardized methodologies, playbooks, and procedures for technical delivery.
• Establish quality assurance processes and peer review mechanisms for client deliverables.
• Create training programs to elevate team capabilities in CMMC and Microsoft security technologies.
• Foster culture of client success, technical excellence, and continuous learning.

Practice Growth & Thought Leadership:

• Identify opportunities to expand consulting services and develop new offerings.
• Contribute to business development activities and proposal responses.
• Represent the practice at client events.
• Develop thought leadership content on CMMC implementation best practices.
• Build relationships with Microsoft partners, C3
  
  PAOs, and industry organizations.
• Stay current on CMMC program updates and DoD cybersecurity requirements.

• Bachelor's degree in computer science, Information Security, or related field (Master's preferred).
• 10+ years of progressive experience in information security and compliance, with significant consulting experience.
• 4+ years managing security consultants with proven track record of team productivity.
• Deep expertise in securing complex cloud environments, threat modeling, and risk assessment.
• Strong cross-functional collaboration skills, balancing security requirements with business objectives.
• Clear and persuasive communicator in both writing and verbal settings.
• Low ego, high empathy leader who attracts talent and builds diverse, inclusive teams.
• Passionate about developing engineers' careers in a supportive yet challenging environment.
• 5+ hands-on experience implementing Microsoft security solutions across varied environments.
• Experience translating technical requirements into business terms for non-technical stakeholders.
• Holds any Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500).
• Security clearance preferred.

• Azure and Azure Government cloud security configurations.
• Microsoft Defender suite deployment and optimization.
• Microsoft Purview, Azure Information Protection, and data classification strategies.
• Microsoft Sentinel and cost-effective SIEM alternatives.
• Identity and Access Management solutions (Azure AD, Conditional Access).
• Network segmentation and boundary protection strategies.
• Security documentation and technical writing.

• CISSP, CISM, or equivalent security leadership certification.
• Additional relevant certifications (Security+, CISA, GCIH, GIAC).

• Client Relationship Management: Buil…