Senior Manager, Cybersecurity & IT Compliance

About the Role

The Senior Manager of Cybersecurity & IT Compliance is Clarity's hands on cybersecurity and ISSM level operational leader responsible for maintaining secure, compliant, and authorization ready enterprise and classified environments.

Reporting to the Vice President of Information Technology, this role leads day to day cybersecurity operations, RMF and A&A activities, CMMC readiness, vulnerability and risk management, continuous monitoring, and the development of Clarity's cybersecurity team.

This role works closely with the Senior Manager, Technical Mission Readiness and One IT engineering teams. Cybersecurity defines and validates security requirements and risk. Technical Mission Readiness coordinates mission requirements and operational readiness. Engineering implements and operates the underlying technology.

Success means Clarity can demonstrate its security posture, sustain required certifications and authorizations, identify and remediate risk quickly, and support mission execution without unnecessary friction.

Responsibilities

ISSM, RMF & Authorization

• Serve as the ISSM level cybersecurity lead for applicable enterprise and classified systems.
• Lead RMF and A&A activities through authorization and continuous monitoring.
• Own SSPs, POA&Ms, control implementation documentation, security boundaries, authorization artifacts, and supporting evidence.
• Maintain compliance with NIST 800 53, NIST 800 171, CMMC, RMF, ICD, JSIG, and applicable customer requirements.
• Coordinate directly with government ISSMs, ISSOs, assessors, validators, and Authorizing Officials.
• Ensure documentation and evidence accurately reflect technical implementation.
• Drive findings and POA&Ms through remediation, validation, and closure.

CMMC & Compliance

• Lead CMMC Level 2 readiness and sustainment activities.
• Maintain defensible CUI boundaries, SSPs, evidence, and control implementation.
• Identify gaps between documented controls and actual implementation and drive corrective action.
• Coordinate assessments, customer reviews, and certification activities.
• Establish repeatable evidence collection and control validation processes.

Vulnerability, Risk & Continuous Monitoring

• Lead vulnerability and cybersecurity risk management across enterprise and mission environments.
• Ensure vulnerabilities are identified, prioritized, assigned, remediated, and validated.
• Oversee ACAS, Nessus, STIG, endpoint security, SIEM, and related assessment and monitoring activities.
• Maintain cybersecurity risk registers with clear ownership and remediation plans.
• Establish effective continuous monitoring across applicable classified and unclassified environments.
• Escalate material cybersecurity risks and exceptions to the Vice President of Information Technology.

Classified & Mission Security

• Provide ISSM oversight for applicable classified systems, SCIF technology, enclaves, and mission environments.
• Partner with Technical Mission Readiness to ensure mission environments are technically ready and appropriately secured.
• Define security requirements for new systems, connectivity, architectures, and technical changes.
• Support JSIG, ICD, SAP, RMF, and other applicable classified system requirements.
• Validate security implementation and evidence supporting authorization and customer acceptance.

Security Operations & Incident Response

• Lead day to day cybersecurity incident response and coordinate containment, investigation, reporting, recovery, and corrective actions.
• Coordinate incidents across One IT, Corporate Security, programs, leadership, and government stakeholders as required.
• Ensure monitoring provides appropriate visibility into enterprise and mission environments.
• Conduct incident response and tabletop exercises and drive resulting improvements.

Leadership & Team Development

• Build and lead the cybersecurity team required to support Clarity's enterprise and mission requirements.
• Establish clear roles, priorities, ownership, and performance expectations.
• Develop ISSOs and cybersecurity personnel through mentoring, training, and technical leadership.
• Assign work, remove blockers, and hold the team accountable for outcomes.
• Build strong partnerships across One IT, Technical Mission Readiness, Corporate Security, and program teams.
• Automate evidence collection, monitoring, vulnerability management, and reporting where practical.

Required Qualifications

• Active TS/SCI clearance.
• Prior ISSM experience or demonstrated performance of equivalent ISSM responsibilities in DoD or Intelligence Community environments.
• 8 or more years of progressive cybersecurity, information assurance, or information systems security experience.
• Hands on experience leading RMF and A&A activities through authorization and continuous monitoring.
• Experience developing and maintaining SSPs, POA&Ms, security controls, authorization artifacts, and assessment evidence.
• Strong working knowledge of NIST 800 53, NIST 800 171, CMMC, RMF, ICD, JSIG, and applicable DoD or IC requirements.
• Experience supporting classified information systems, SCIF environments, or mission networks.
• Experience with ACAS, Nessus, eMASS, Xacta, DISA STIGs, SIEM, EDR, or comparable security technologies.
• Working technical knowledge of identity, endpoints, networks, infrastructure, cloud, logging, and monitoring.
• Demonstrated cybersecurity team leadership and ability to drive remediation through completion.
• Ability to communicate technical risk clearly to engineers, program leaders, executives, and government stakeholders.
• Current DoD 8140 qualification appropriate to the position, with CISSP strongly preferred.
• Bachelor's degree in a relevant technical field or equivalent relevant experience.

Preferred Qualifications

• CISSP certification.
• Experience serving as an ISSM for multiple classified systems or enclaves.
• Experience with Joint Staff JSIG ATOs, SAP environments, or IC accreditation.
• Experience leading CMMC Level 2 readiness or assessment activities.
• Practical experience implementing Zero Trust across identity, devices, networks, applications, and data.
• Experience building or restructuring cybersecurity teams.
• Prior government civilian or military cybersecurity experience.

Position Details

Reports To: Vice President, Information Technology
Work Location: In office a minimum of three days per week
Travel: Up to 25%
Security Clearance: Active TS/SCI required
Salary Range: $100,000 to $278,000