Cyber Compliance Oversight Manager

What you'll do

• Oversee the Managed Services Provider (MSP) responsible for delivering day-to-day cybersecurity and technology compliance services.
• Review and approve MSP outputs including control framework changes, assessment results, and compliance reports.
• Monitor MSP performance against established SLAs and KPIs to ensure quality and timely execution of activities.
• Partner with the MSP to assess regulatory changes and update compliance obligations and common controls.
• Manage risk-based control assessments by reviewing design effectiveness and validating remediation plans for identified gaps.
• Oversee ongoing compliance monitoring results and manage the escalation of potential issues or trends.
• Serve as the primary point of contact for Internal Audit to ensure evidence preparation and alignment with regulations.
• Present monthly compliance metrics and actionable insights to leadership through dashboards and executive reporting.

What we're looking for

• Bachelor’s degree in Cybersecurity, Information Technology, or Management.
• Five years of experience in a cyber compliance operations role in a private, public, government, or military environment.
• Deep understanding of cybersecurity principles, practices, regulatory obligations, and common control frameworks (preferred).
• Familiarity with standards such as ISO 27001, NIST CSF, SOX, PCI, CMMC, TISAX, or SWIFT (preferred).
• Experience managing compliance programs including control framework governance and regulatory change management (preferred).
• Proven experience conducting or overseeing control assessments and evaluating design and operating effectiveness (preferred).
• CISSP, CISA, CISM, or ISO 27001 Lead Auditor certification (preferred).