About the Role

The Senior Manager of Cybersecurity & IT Compliance will lead the execution of Clarity's cybersecurity governance, compliance, authorization, and risk management activities. This role ensures security requirements are translated into operational controls, documentation, remediation activities, and measurable outcomes across corporate and mission environments.

Reporting to the Vice President of Information Technology, the Senior Manager will work closely with One IT, Security, program delivery teams, and government stakeholders to maintain compliance, support authorization activities, strengthen cybersecurity maturity, and reduce organizational risk.

The ideal candidate combines strong hands-on cybersecurity and compliance experience with the ability to lead a technical team, manage competing priorities, and drive work to completion in a fast paced government contracting environment.

Responsibilities

Compliance & Authorization Management

• Lead execution of Clarity's compliance activities across CMMC, NIST 800 171, NIST 800 53, FISMA, RMF, and applicable IC requirements including ICD and JSIG. • Develop, maintain, and review SSPs, POA&Ms, Control Implementation Matrices, boundary documentation, ATO artifacts, and supporting evidence. • Ensure cybersecurity documentation remains current, accurate, audit ready, and representative of the operating environment. • Plan and coordinate vulnerability scans, compliance assessments, contingency plan testing, control assessments, and risk assessments. • Support internal and external assessments, audits, certification activities, and government authorization efforts. • Manage the POA&M lifecycle including remediation tracking, risk prioritization, validation, evidence collection, and closure.

Vulnerability & Risk Management

• Manage vulnerability management activities across enterprise and mission information systems. • Review and prioritize vulnerabilities based on technical severity, operational impact, mission requirements, and organizational risk. • Coordinate vulnerability discovery using manual assessment and automated tools including ACAS, Nessus, DISA SRR scripts, HBSS, and endpoint security platforms. • Develop and track remediation activities aligned with DISA STIGs and applicable DoD security requirements. • Maintain cybersecurity risk registers with clear owners, remediation plans, and status. • Support third party, vendor, software, and supply chain cybersecurity risk assessments.

Incident Response & Continuous Monitoring

• Maintain and execute incident response processes supporting identification, containment, investigation, reporting, recovery, and lessons learned. • Coordinate cybersecurity incident activities across One IT, Security, programs, and organizational stakeholders. • Support continuous monitoring across classified and unclassified environments. • Review security telemetry, audit records, alerts, and findings for potentially unauthorized or anomalous activity. • Coordinate incident response exercises and cybersecurity tabletop exercises. • Support business continuity and disaster recovery planning and testing.

Enterprise IT & Infrastructure Security

• Partner with the Director of Engineering & Service Delivery to ensure enterprise systems and networks meet applicable cybersecurity requirements. • Support cybersecurity governance and technical oversight for SCIF IT operations and classified environments. • Support the design, deployment, assessment, and operation of secure mission environments, classified enclaves, cloud platforms, and cyber ranges. • Evaluate security technologies and recommend scalable solutions that improve cybersecurity capabilities and support organizational growth. • Provide cybersecurity guidance for infrastructure modernization, software implementation, vendor relationships, and third party services. • Ensure cybersecurity controls support operational requirements without unnecessarily impacting mission execution or business velocity.

Stakeholder Engagement & Program Support

• Serve as a cybersecurity and compliance resource for program delivery, Growth, Capture, and Proposal teams. • Review cybersecurity requirements associated with new programs, contracts, proposals, and technical environments. • Support customer engagements, government accreditation activities, technical reviews, and cybersecurity discussions. • Prepare technical reports, risk assessments, cybersecurity briefings, and leadership updates. • Translate cybersecurity requirements into clear technical and operational actions.

Leadership & Workforce Development

• Lead and develop cybersecurity and compliance personnel with clear priorities, responsibilities, and performance expectations. • Assign work, track deliverables, remove blockers, and ensure commitments are completed on schedule. • Partner with Talent Acquisition and One IT leadership to identify workforce requirements and required competencies. • Support onboarding, training, mentoring, and knowledge transfer across the cybersecurity team. • Develop cybersecurity awareness and IT security training programs with measurable outcomes. • Identify opportunities to automate compliance, evidence collection, monitoring, reporting, and recurring cybersecurity processes. • Drive continuous improvement that increases cybersecurity maturity, reduces risk, and improves operational effectiveness. • Promote security as an enabler of mission execution and business growth.

Required Qualifications

• Active TS/SCI clearance. • Current DoDM 8570 IAM Level II or III certification, with CISSP strongly preferred, or equivalent DoD 8140.03 qualification. • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. • 8 or more years of progressive cybersecurity, information assurance, or IT compliance experience within DoD or IC environments. • Hands on experience with RMF including SSP development, POA&M management, control implementation, evidence development, and ATO package preparation. • Strong working knowledge of FISMA, NIST 800 53, NIST 800 171, CMMC, RMF, ICD, and JSIG requirements. • Experience with vulnerability assessment tools such as ACAS, Nessus, eMASS, Xacta, HBSS, or comparable platforms. • Experience assessing IaaS, PaaS, and SaaS environments. • Experience working within classified environments and complex enterprise or mission network architectures. • Demonstrated ability to lead technical personnel and drive cybersecurity initiatives through completion. • Must be eligible for employment in the United States.

Preferred Qualifications

• CISSP certification. • SecurityX, CySA+, or equivalent certifications. • Experience supporting Joint Staff JSIG ATOs or IC accreditation activities. • Experience supporting DoD, IC, or federal cybersecurity and compliance programs. • Prior government civilian or military cybersecurity experience. • Experience supporting cybersecurity budgets and technology planning in a government contracting environment. • Familiarity with SIEM, continuous monitoring, vulnerability management, and automated compliance platforms. • Experience supporting cybersecurity programs through organizational growth, acquisition, or infrastructure modernization.

Position Details

Reports To: Vice President, Information Technology Travel: Up to 25% Security Clearance: Active TS/SCI required

Salary Range: $100,000 - $278,000