Cybersecurity & Compliance Government Services Manager

Job Description

GENERAL DESCRIPTION 

\n

\n

The Manager – Cybersecurity & Compliance Advisory & Managed Services position is a full-time client serving role that is responsible for delivering and overseeing regulatory assessments and ongoing cybersecurity program management for clients across various industries. This role focuses on evaluating cybersecurity and compliance posture against recognized frameworks and regulatory requirements, identifying gaps, and driving the implementation of remediation strategies. The position also involves managing client engagements, coordinating internal resources, and providing expert advisory support to maintain and improve clients’ security and compliance environments.

\n

\n

DUTIES AND RESPONSIBILITIES

\n

Regulatory & Framework Assessments

\n

\n
• Perform cybersecurity and compliance assessments aligned with frameworks and standards such as:
\n
• NIST CSF / NIST 800-53
\n
• FedRAMP / GovRAMP / FISMA / CMMC
\n
• ISO/IEC 27001
\n
• HIPAA / HITRUST
\n
• SOC 2 / SSAE 18
\n
• PCI DSS
\n
• GDPR / CCPA / Other data privacy regulations
\n
• Analyze existing security controls and compliance measures, document findings, risks, and recommended actions.
\n
• Prepare and deliver client-facing reports and presentations summarizing assessment outcomes and strategic recommendations.
\n

\n

Cybersecurity & Compliance Program Oversight

\n

\n
• Support the development, implementation, and maintenance of client cybersecurity and compliance programs.
\n
• Guide clients through readiness activities for audits and certifications, helping ensure ongoing compliance with applicable regulations and standards.
\n
• Monitor regulatory changes and industry developments, advising clients on necessary updates to their policies, procedures, and control environments.
\n
• Assist in the development of security governance documentation, risk registers, and compliance monitoring plans.
\n

\n

Client Engagement & Delivery Management

\n

\n
• Serve as the day-to-day point of contact for client engagements, ensuring timely, high-quality service delivery.
\n
• Collaborate with cross-functional teams, including technical staff and business stakeholders, to execute projects and support client objectives.
\n
• Lead or support the delivery of managed compliance services, such as control monitoring, evidence management, and policy lifecycle support.
\n
• Mentor and guide junior team members on assessment methods, client communication, and cybersecurity concepts.
\n

\n

Service Enhancement & Business Support

\n

\n
• Contribute to the continuous improvement of service delivery processes, templates, and methodologies.
\n
• Develop reusable tools, documentation, and frameworks to streamline client work and promote consistency. Participate in scoping, proposal development, and other business development activities when needed.
\n

\n

\n

REQUIRED QUALIFICATIONS    

\n

\n
• Bachelor’s degree in Cybersecurity, Information Systems, or a related field (Master’s degree preferred).
\n
• 5–10 years of experience in cybersecurity, compliance, or risk advisory, including direct experience with audits, assessments and program management.
\n
• Experience with FedRAMP and CMMC compliance engagements, including assessment of readiness, control validation, documentation review, and client advisory support across federal and defense-aligned frameworks.
\n
• Strong working knowledge of cybersecurity and data privacy regulations, frameworks, and best practices.
\n
• Proven ability to manage projects, communicate with clients effectively, and deliver actionable insights and recommendations.
\n
• Excellent writing, presentation, and interpersonal skills.
\n

\n

\n

DESIRED QUALIFICATION

\n

\n
• Either actively hold, or willingness to pursue relevant additional professional certifications (e.g., CISA, CISM, CISSP, ISO 27000 LA, PCI QSA, HITRUST CCSFP, CCP, CCA, etc.)
\n
• Working knowledge of multiple cybersecurity frameworks, application controls, and software development life cycle and methodologies
\n
• Demonstrated consistency in cultural values, principles, and work ethic
\n
• Ability to lift and move up to 15 pounds
\n
• Ability to sit for prolonged periods of time.
\n
• Ability to stand, walk, bend, or reach as necessary for job tasks.
\n
• Ability to use hands/fingers for typing, writing, or handling materials.
\n

\n

\n

COMPANY DESCRIPTION

\n

360 Advanced is a Cybersecurity and Compliance professional services firm that provides customized integrated solutions. Our clients range across industries and extend from small businesses to the Fortune 500. We work with client operations in over 40 states and on five continents globally. We are based in downtown St. Petersburg and are looking for a Cybersecurity & Compliance Managed Services Manager to join our team.