Compliance Implementation Manager; Tax & Legal Focus

We are seeking a Compliance Implementation Manager who specializes in the Tax and Legal sectors. This is not a role for a clipboard auditor who simply identifies flaws and walks away.

We need a builder and a closer
. You will guide our clients through the complex journey of regulatory compliance (IRS Pub 4557, FTC Safeguards Rule, NIST CSF). Your mission is to perform Gap Analyses and then, crucially,
manage the remediation process to ensure those gaps are actually closed. You will serve as the bridge between the client's business requirements and our technical team's execution.

Role Scope: This is a Phase 1 / Build role. You will be responsible for designing and documenting the compliance delivery process while actively managing 10–15 client engagements through their compliance lifecycle. As we scale, this role may evolve into a team lead position overseeing additional specialists.

• Trusted Advisor: Serve as the primary point of contact for CPAs, Tax Partners, and Attorneys regarding data security. Translate regulatory mandates into calm, actionable project plans.
• Gap Analysis &
  
  Roadmap:
  
  Conduct assessments of client environments to identify non‑compliance. Create a clear, prioritized roadmap to move them from non‑compliant to compliant status.
• Onboarding: Lead the client through the setup of our GRC portal. Facilitate the process—help them upload evidence and understand their dashboard.

• Own the Fix: You do not just report problems; you drive the resolution.
• Technical Remediation:
  Create and track tickets for our Backend/Support teams (e.g., Deploy EDR, Enable MFA) and verify completion.
• Policy Remediation:
  Customize Written Information Security Plans (WISPs) and Incident Response Plans (IRPs) for the client, ensuring they are adopted, not just filed away.
• Verification: Verify that technical controls implemented by the backend team actually satisfy the specific compliance requirement (e.g., IRS Security Six) before marking tasks complete.

• Build the Playbook: Help us move from custom projects to scalable processes. Document Standard Operating Procedures (SOPs) for the compliance lifecycle so we can replicate success across our client base.
• Sales & Growth Support: Occasionally assist the Sales team as a Subject Matter Expert (SME) during prospect calls to explain our compliance value proposition.

• Breach Coordination: In the event of a security incident, act as the coordination point between the client, our Backend/SOC Team, and external stakeholders (Cyber Insurance, Breach Counsel).
• Scope of Authority: You are responsible for communication flow and timeline management. Technical containment decisions remain with the SOC lead; legal/disclosure decisions remain with breach counsel. You ensure all parties are connected and informed.
• Privilege Preservation: Ensure communications preserve Attorney‑Client Privilege where applicable.

Must Have:

• 3+ years in compliance, risk management, or security consulting
• Direct experience implementing FTC Safeguards Rule or IRS Pub 4557 requirements
• Demonstrated ability to manage 10+ client engagements simultaneously
• Experience with GRC platforms for evidence collection and compliance tracking
• Strong written communication skills for policy documentation
• Sector
  
  Experience:
  
  You have worked with (or inside)
  Accounting Firms, Tax Practices, or Law Firms
  . You understand the unique constraints of Tax Season (Jan 15 – April 15), the critical nature of Tax/Practice Management software, and specific regulatory concerns (IRS fines, reputation loss).

• Certifications:
  
  CISM, CISA, CISSP, CIPP/US, or CompTIA Security+
• Familiarity with NIST CSF 2.0 or SOC 2 frameworks
• Basic technical literacy (can read a firewall rule, understand MFA configurations)
• Experience creating compliance training materials

Regulatory Fluency: You are comfortable discussing and applying IRS Pub 4557, FTC Safeguards Rule, and GLBA. You understand the Qualified Individual (QI) role and can support a client's designated QI —though you will not personally assume…