Compliance Program Manager

RSI Security

. Own the organization-wide compliance framework calendar, tracking rule changes, standard revisions, program updates, and authorization requirements .

Posted 11/7/2026full-timeRemote • United StatesMid-LevelSenior💰 $105,000 - $145,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity compliance and regulatory program management, with a strong focus on frameworks such as CMMC/NIST, FedRAMP, and ISO. Capable of driving compliance initiatives, managing obligations, and producing business cases while ensuring alignment with organizational goals.

Highest-signal resume keywords

Cybersecurity ComplianceGRC ManagementCMMC/NIST ComplianceISO-Based ComplianceRegulatory Program Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Framework ManagementObligations Register MaintenanceInternal Audit CoordinationCorrective Action TrackingImpact AnalysisDocumentation ManagementBusiness Case DevelopmentPerformance Metrics TrackingPricing Model DevelopmentQuality Gates Definition

Soft Skills

Clear WritingOutcome OwnershipEvidence-Based RecommendationsCollaboration with StakeholdersConflict Resolution

Industry Keywords

AccreditationRegulatory StandardsNonconformitiesMarket Opportunity EvaluationTechnical Claim Review

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own the organization-wide compliance framework calendar, tracking rule changes, standard revisions, program updates, and authorization requirements
Maintain an obligations register mapping external requirements to internal owners, controls, artifacts, and evidence locations
Drive readiness for new and renewing authorizations, accreditations, and program approvals
Coordinate internal audits, surveillance activities, and external assessment cycles
Track corrective actions, nonconformities, and findings through documented closure
Monitor regulatory and standards bodies and issue impact analyses to leadership
Maintain compliance documentation with version control, currency, and traceability
Serve as the internal subject matter expert on framework requirements
Escalate impartiality, independence, conflict-of-interest, and eligibility questions appropriately
Evaluate emerging and revised frameworks for market opportunity and produce business cases
Own productization of approved offerings, including scope, deliverables, methodologies, work breakdown structures, effort models, and quality gates
Partner with Finance and Sales on pricing, rate cards, and margin targets
Build delivery artifacts, templates, evidence requirements, and reporting formats
Define staffing, credential, and technical-readiness requirements with TAC and delivery leadership
Develop enablement materials for Sales, RFP, and delivery teams
Own launch plans and post-launch reviews
Maintain the offering portfolio and identify offerings for revision, repricing, consolidation, or retirement
Partner with Marketing on messaging accuracy and technical claim review
Track program and offering performance through weekly or monthly scorecard metrics

Requirements

What you’ll need

At least 5 years of professional experience in cybersecurity compliance, GRC, assurance, accreditation, or regulatory program management
Professional experience working with one or more of CMMC/NIST, FedRAMP, or ISO-based compliance programs
Currently based in the United States and legally authorized to work in the United States
Currently authorized to work for any employer in the United States on a full-time, ongoing basis without current or future employer immigration sponsorship
Ability to satisfy background investigation, personnel eligibility, and access requirements that may apply to U.S. federal cybersecurity programs
U.S.-citizen-only role
Ability to read primary sources rather than relying on summaries or secondhand interpretation
Ability to own outcomes without directly managing the people who produce them
Ability to support recommendations with evidence
Comfort working in requirements documents and pricing models
Ability to write clearly for salespeople, project managers, and assessors
Alignment with RSI's Core Values and commitment to quality