Manager, Compliance Advisory

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges.

We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape.

We are headquartered in Chicago, Illinois with offices across the U.

S. and U.

K., and we support clients around the world.

But that’s not who we are – that’s just what we do.

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem‑solvers who are hungry to learn, grow, and make a difference.

Position Summary

The Manager, Public Sector Advisory will support Public Sector advisory engagements while managing and mentoring team members.

The role combines people leadership, project delivery, and client engagement, with accountability for high-quality delivery, project margin, utilization, and adherence to established methodologies.

You will lead and support advisory engagements across the Public Sector frameworks, maintain strong client relationships throughout the engagement lifecycle, and provide oversight across compliance frameworks such as Fed RAMP, CMMC, DISA Cloud SRG, FISMA, etc.

This role includes reviewing and developing compliance documentation, ensuring quality through peer reviews, collaborating with internal stakeholders, and supporting IT security consulting for cloud and on‑premises environments.

As a leader, you will mentor locally based consultants, foster client relationships and lead various engagements within the Public sector advisory team.

As part of your responsibilities, you will directly manage and mentor 2-3 team members, building a culture of accountability and excellence while nurturing high-trust partnerships with clients and stakeholders across all levels of their organizations throughout the engagement lifecycle.

This role requires a deep understanding of compliance framework requirements, including the list of frameworks noted above.

You will provide advisory consulting support, develop compliance‑related reports and documentation, and ensure quality control through peer reviews of project deliverables.

Collaboration will be central to your work, as you’ll partner with sales, quality management, and delivery teams to ensure project timelines and deliverables are met while maintaining strong customer satisfaction.

Mentorship and coaching will be key elements of your leadership.

You will guide team members in technology, consulting methodologies, technical reviews, and professional writing, ensuring they meet project margin and utilization targets.

Additionally, your expertise will contribute to the success of IT system security consultations for both cloud-based and on‑premises environments.

As a relationship builder, you’ll establish trust with accounts, identify upsell and cross-sell opportunities, and escalate these to the sales team as appropriate.

Your ability to cultivate collaborative partnerships will ensure client satisfaction across all engagements.

To stay ahead of industry trends, you’ll actively pursue professional development opportunities and encourage continuous updates to team policies, procedures, and training in alignment with best practices.

Finally, your strategic contributions will support organizational goals, helping grow the service line and expand the team’s capabilities.

By focusing on successful project outcomes and client satisfaction, this role will blend technical expertise, leadership, and strategic vision to drive the success of the Public sector advisory team.

• What You’ll Do
• People Management
• Directly manage and mentor consultants, fostering a culture of accountability, collaboration, and continuous improvement.
• Provide day‑to‑day leadership, coaching, and performance feedback to team members aligned with project and practice expectations.
• Support team member onboarding, training, and ongoing skills development.
• Assist with resourcing decisions, workload planning, project margin and utilization management.
• Client Engagement & Project Delivery
• Support advisory engagements across the full project lifecycle, including planning, execution, review, and closure.
• Maintain clear, professional communication with client stakeholders at multiple levels.
• Escalate project risks, issues, or resourcing concerns in a timely and effective manner.
• Partner with internal delivery, quality, and sales teams to ensure client satisfaction and successful outcomes.
• Identify potential upsell and cross‑sell opportunities and elevate them to appropriate sales stakeholders.
• Technical Execution
• Execute and oversee compliance assessments aligned with recognized frameworks, including but not limited to Fed RAMP, CMMC, DISA Cloud SRG, and various international frameworks noted in the description above.
• Lead and perform interviews, examinations, and testing procedures to validate control implementation.
• Develop, review, and maintain IT security documentation, including policies, procedures, risk assessments, and supporting artifacts.
• Advise clients on improving security programs, compliance posture, and risk management practices.
• Support IT system security initiatives for both cloud-based and on‑premises environments.
• Quality, Knowledge & Practice Contribution
• Perform quality reviews of project deliverables to ensure accuracy, completeness, and alignment with framework requirements.
• Mentor project teams on compliance methodologies, technical standards, and professional writing.
• Stay current with industry trends, emerging risks, and evolving compliance requirements.
• Contribute to the development and maintenance of internal policies, procedures, tools, and training materials.
• What You’ll Bring
• Minimum of 5 years or more of working experience in information technology, information security, technical assessment, or audits
• Substantial knowledge of security control requirements (NIST, FISMA, Fed RAMP, CMMC, Do D, etc.) and how they overlap with additional frameworks
• Significant experience in understanding and applying relevant technical knowledge in FISMA/Fed RAMP and other compliance framework assessments within moderate and large hyperscale CSP environments
• Knowledge in conducting multi‑framework consolidated compliance assessment activities
• Detailed understanding of IT security technologies including network and application security, firewalls, access management, and data protection
• Experience with virtualization and cloud technologies
• Experience with client‑server and traditional on‑premises architecture
• Familiarity with statutes and regulations across multiple industries relevant to IT
• Demonstrated ability to lead moderately complex system assessments/consulting engagements independently
• Demonstrated ability to assist team members with proper artifact collection and interviewing clients to ascertain control implementation details
• Demonstrated ability to read and interpret all control families
• Demonstrated ability to read and interpret firewall rulesets and to create network/boundary/data flow diagrams
• Strong written and verbal communication skills including the ability to explain technical matters to a non‑technical audience
• Strong consulting skills; ability to advise and challenge the status quo while building strong relationships
• Ability to build high‑trust relationship and credibility quickly
• Ability to lead projects successfully and delegate up and across
• Strong attention to detail
• Strong problem solving, decision making, organizational and analytical skills
• Ability to prioritize and manage multiple initiatives/projects.
• Ability to be self‑driven and have strong independent initiative.
• Strong excel skills with ability to develop worksheets with complex formulas
• Ability to facilitate meetings to small or large groups
• Diplomatic and broad minded
• Ability to lead teams small to large teams in the assessment and internal environments
• Ability to speak to Cloud Service Providers to resolve issues and come to a conclusion of the assessment
• At least one of the following Advanced certifications or equivalent in cybersecurity or cloud: CISSP, CISA, CISM, CAP, CRISC, CMMC CCP, and/or cloud specific certification (AWS, GCP, or Azure) or specialty certification in security
• Bachelor’s degree (four‑year college or university) or equivalent education and experience
• Bonus Points
• Strong knowledge of container‑based architectures
• Knowledge of various cloud environments, including AWS, GCP, and Azure.
• Bachelors of Science degree in a technical field (CIS, MIS, IT, Engineering, or related field)
• Why You’ll Want to Join Us

At Coalfire, you’ll find the support you need to thrive personally and professionally.

In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.

Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities.

You’ll have opportunities to join employee resource groups, participate in in‑person and virtual events, and more.

And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

At Coalfire, equal opportunity and pay equity is integral to the way we do business.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.

To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at Human Resources MB@coalfire. com.

#J-18808-Ljbffr