Cybersecurity and Compliance Manager

We believe talent deserves a human touch. Your application will be read by an actual person who’s excited to discover the real you. At Kinetix, a New Charter Company, we are seeking a Cybersecurity and Compliance Manager in a remote, United States-based role (in other companies this person could hold the title of Senior Cybersecurity Compliance Manager, Cybersecurity Risk and Compliance Manager, Information Security Compliance Manager) to lead cybersecurity compliance programs, risk management initiatives, and strategic security advisory services for clients.

This is a remote position based in the United States.

In this role, you will serve as a senior compliance expert within the Cybersecurity Services (CSS) team, partnering with clients, executive leadership, security operations, and internal analysts to strengthen security programs and meet contractual obligations. You will lead multi-framework compliance initiatives using standards such as NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001 while providing vCISO advisory services, audit guidance, and executive‑level risk reporting.

You will also guide and coach members of the security and compliance team as the organization grows.

To be successful in this role, you will combine deep cybersecurity governance, risk, and compliance expertise with strong client‑facing leadership and practical technical knowledge. You will translate complex security risks into actionable recommendations, oversee consistent delivery of cybersecurity services, and help clients improve their security maturity through risk assessments, remediation planning, and continuous compliance monitoring. You will also collaborate with technical teams to ensure security commitments are fulfilled and client environments remain aligned with applicable regulatory and contractual requirements.

• Lead cybersecurity compliance initiatives, including risk assessments, policy development, audit preparation, evidence collection, and ongoing compliance monitoring across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001.
• Conduct compliance gap assessments, framework crosswalks, maturity evaluations, and remediation tracking to strengthen client security programs.
• Oversee the Security Program Platform and associated governance, risk, and compliance processes.
• Manage internal and client risk assessments, cyber insurance questionnaires and renewals, third‑party risk management, and vendor security due diligence.
• Provide vCISO advisory services, including security strategy, roadmaps, investment planning, and executive and board‑level reporting.
• Guide clients and internal stakeholders on responsible AI adoption, including AI governance, acceptable‑use policies, data protection, and emerging security risks.
• Maintain security policies, procedures, and audit‑ready documentation while ensuring identified gaps are tracked through remediation.
• Oversee Cybersecurity Services delivery to ensure contractual security commitments are fulfilled and service gaps are addressed with clear accountability.
• Determine applicable cybersecurity deliverables across Essentials, Core, Enterprise, and Advanced service tiers based on client requirements, endpoint counts, compliance obligations, and risk profiles.
• Ensure consistent delivery of Cyber Posture Snapshots, Continuous Health Checks, managed remediation, NIST CSF maturity scoring, and annual security summaries.
• Lead executive client strategy meetings and serve as the escalation point for complex cybersecurity, compliance, and risk management concerns.
• Communicate security findings, business risks, remediation priorities, and strategic recommendations to technical and nontechnical stakeholders.
• Collaborate…