Manager of Cybersecurity Compliance and Risk Services

Rsi Security - San Diego, CA

Full-time - Mid Level

Remote - San Diego, CA

About the position

The Manager of Cybersecurity Compliance and Risk Services at RSI Security is responsible for leading a team of cybersecurity professionals in providing compliance, risk assessment, and advisory services to clients. This role focuses on ensuring clients meet compliance requirements, mitigate risks, and enhance their security posture through effective management and development of service methodologies aligned with industry standards.

Responsibilities

• Lead and mentor a team of cybersecurity consultants and analysts, ensuring effective performance management, training, and professional development.
• Serve as the primary point of contact for pre-sales scoping in support of the sales team.
• Engage with clients to understand their cybersecurity needs, assess risks, and develop tailored compliance strategies based on relevant frameworks.
• Develop, implement, and refine cybersecurity compliance and risk management service methodologies to align with industry best practices and regulatory standards.
• Oversee the planning, execution, and reporting of cybersecurity risk assessments, vulnerability assessments, and compliance audits.
• Develop risk mitigation strategies and compliance plans for clients, ensuring adherence to standards such as PCI DSS, ISO 27001, ISO 42001, and ISO 23894.
• Continuously evaluate and improve processes, tools, and techniques used in service delivery to enhance efficiency, reduce risks, and improve client outcomes.
• Stay up-to-date with evolving cybersecurity regulations, industry trends, and best practices to ensure services remain relevant and effective.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Business, or a related field.
• Minimum of 5 years of experience in cybersecurity compliance, risk management, or consulting services, with at least 2 years in a leadership role.
• In-depth knowledge of compliance frameworks such as PCI DSS, ISO 27001, NIST, and emerging standards like ISO 42001 and ISO 23894.
• Strong understanding of risk assessment methodologies and mitigation strategies.
• Excellent communication, client management, and problem-solving skills.

Nice-to-haves

• An advanced degree (e.g., MBA or MS in Cybersecurity) is a plus.
• Any consultant sales training such as MEDDIC is a plus.
• Relevant certifications such as CISSP, CISM, CISA, PCI-QSA, or ISO Lead Auditor are preferred.
• CPA is a plus.

Benefits

• Medical and Vision Insurance
• Dental Insurance
• Unlimited PTO
• 401(k)
• Tuition Reimbursement
• Paid Parental Leave