Compliance Manager

OverviewJob SummaryThe Compliance Manager oversees United Rotorcraft’s (UR) defense and regulatory compliance initiatives, ensuring adherence to federal standards such as CMMC, DFARS, NIST 800-171, ITAR, and EAR. This role is responsible for safeguarding Controlled Unclassified Information (CUI), managing defense contract obligations, and maintaining export control compliance. The Compliance Manager will foster a culture of accountability and compliance throughout the organization and collaborates with Technology, Operations, Facilities, and Corporate teams to ensure UR remains audit-ready, continuously monitored, and aligned with Department of Defense and other regulatory requirements.Essential Functions and Responsibilities include the following:Lead UR’s compliance strategy and program development (CMMC, DFARS, NIST 800-171, ITAR/EAR, CUI handling), including policies, procedures, and controlsManage audit readiness and external assessments, ensuring documentation, evidence, and control implementation meet regulatory requirementsEnsure supplier and subcontractor compliance by supporting the flow down of contractual, cybersecurity, and export control requirements in coordination with the Contract Admin & CX Services ManagerPartner with Technology, Operations, Facilities, and other functions to ensure security, access, and incident reporting controls are effectively implementedMonitor regulatory updates (DoD, NARA, BIS, DDTC) and adjust UR compliance programs accordinglyLead incident reporting and response coordination, ensuring DFARS View phone number on click.appcast.io and ITAR/EAR requirements are metDevelop and deliver compliance training and awareness programs for employees and contractors handling CUI or export-controlled dataMaintain compliance metrics and risk tracking, reporting status and findings to UR leadershipServe as primary liaison with regulatory agencies, including DCAA, DCMA, BIS, and DDTC, and coordinate responses to audits and inquiriesContinuously evaluate and enhance compliance programs, incorporating industry best practices and benchmarking against peersOversee third-party risk management, including compliance due diligence and monitoring of vendors and subcontractorsEnsure data privacy and protection compliance, collaborating with IT and legal teams to safeguard sensitive informationPromote ethics and integrity across the organization, investigating and resolving compliance-related concernsLead policy governance, including development, review, and lifecycle management of compliance-related policiesAdvise senior leadership on strategic compliance risks, mitigation plans, and integration with business objectivesCoordinate crisis and incident response efforts, including breach investigations and remediation planningChampion a proactive compliance culture, using communication, engagement, and feedback mechanismsEvaluate and implement compliance technologies, including automation tools for monitoring and reportingOther duties as assignedAdditional Job RequirementsRegular scheduled attendanceIndicate the percentage of time spent traveling: 10%Subject to applicable laws and Air Method’s policies, regular attendance is an essential function of the position. All employees must follow Air Methods’ employment practices and policies.Supervisory ResponsibilitiesThis position may supervise over teammates in the department. Carries out supervisory responsibilities in accordance with the organization’s policies and applicable laws. Responsibilities include interviewing, selecting, hiring, and training employees; planning, assigning, and directing work; appraising performance; rewarding and disciplining employees; and addressing complaints and resolving problems. For exempt managers: managers that carry out these responsibilities for two or more employees will have significant input in hiring and termination decisions.QualificationsTo perform this job successfully, an individual must be able to perform each essential function satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. In accordance with applicable laws, Air Methods will provide reasonable accommodations that do not create an undue burden so disabled employees may perform the essential functions of the position.Education & ExperienceBachelor’s degree (BS/BA) in a Cybersecurity, Information Systems, Business, or related field from a four-year college or university; and seven (7) or more years related experience and/or training; or equivalent combination of education and experienceMaster’s degree preferred7+ years of experience in compliance, information security, or defense contractingExperience with DFARS, CMMC, ITAR, EAR, and related frameworksFamiliarity with NIST standards (SP 800-171, SP 800-53) and incident reporting under DFARSBackground in aerospace/defense or regulated industries strongly preferredSkillsDefense & Export Compliance Expertise: Strong understanding of CMMC, DFARS, NIST 800-171, ITAR, and EAR requirementsSupplier Compliance & Risk Management: Ability to ensure compliance flow downs to suppliers/subcontractors, monitor adherence, and manage supply chain risk in alignment with DoD regulationsAudit & Assessment Readiness: Experience preparing organizations for DoD audits, CMMC assessments, and government security reviewsIncident Management: Ability to coordinate DFARS-compliant incident reporting, including DoD/DC3 submissionsPolicy & Program Development: Skilled in creating compliance policies, security procedures, and evidence repositoriesRisk & Continuous Monitoring: Proficient in compliance risk management, monitoring controls, and implementing remediation plansCross-Functional Collaboration: Ability to partner with Contract Administration and key business functions to align compliance programs with contractual, customer, and organizational requirementsTraining & Communication: Strong skills in educating non-technical staff and building compliance cultureStrategic Leadership: Able to translate regulatory requirements into practical business processes and long-term compliance roadmapsComputer SkillsProficient with Microsoft Office Suite, including PowerPoint, Visio, Word, Excel, Project, and SharePointCertificates, Licenses, RegistrationsRelevant certifications in compliance and security (e.g., CMMC Professional/Assessor, CISSP, CISM, CISA, CCSK, ITAR/EAR export control training) preferredNote: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position.Air Methods is an EEO/AA employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.Minimum payUSD $113,400.00/Yr.Maximum PayUSD $144,375.00/Yr.Job SummaryCategory: AdministrationPosition Type: Regular Full-TimeRemote: NoLocation: US-CO-Englewood