> Markdown version of [/jobs/ext/499270-it-security-compliance-manager](https://www.wearedevelopers.com/jobs/ext/499270-it-security-compliance-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security & Compliance Manager - **Company:** Complete Turbine Services, LLC - **Location:** Coral Springs, FL, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Backup Devices, Cloud Computing, CompTIA Security+, Cyber Security, Disaster Recovery, Information Security Management, Information Technology Audit, IT Management, Networking Hardware, Information Systems Security Architecture Professional, Network Segmentation, Data Streaming, Software Vulnerability Management, Information Security Management System, Cloud Platform System, Data Classification, Information Technology, Cybercrime, Patch Management, Vulnerability Analysis - **Published:** June 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=232f5a30bae6e273 ## About the Role Do you have experience in Vulnerability management?, Do you have a Bachelor's degree?, * Deep, practical knowledge of NIST SP 800-171, NIST SP 800-53, DFARS 252.204-7012, and CMMC Level 2 requirements. * Proven experience writing, editing, and maintaining institutional IT policies, SSPs, and technical restoration playbooks. * Experience navigating formal external IT audits or third-party assessments (C3PAO). Technical Environment Experience: * Strong background managing enterprise firewalls and network segmentation. * Hands-on experience with modern EDR platforms and centralized RMM tools for patch deployment and monitoring. * Deep familiarity with Microsoft 365 GCC High tenant administration, including data classification and sensitivity labels. * Familiarity with secure file migration, data backup architectures, and Disaster Recovery (DR) execution., * Education: Bachelor's degree in Cybersecurity, Computer Science, IT Management, or a related technical field (equivalent practical experience considered). * Experience: 5+ years of experience in IT systems administration or cybersecurity, with at least 2 years directly managing compliance frameworks within the DoD supply chain. * Citizenship: Must be a U.S. Citizen (required for accessing/managing CUI/ITAR-regulated data). * Certifications (Highly Desired): + Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM). + CMMC Certified Professional (CCP) or CMMC Certified Assessor (CCA). + CompTIA Security+ or CySA+ (minimum baseline). ## Description We are seeking an IT Security & Compliance Manager to oversee, maintain, and defend our digital infrastructure while strictly enforcing federal cybersecurity requirements. In this role, you will own our compliance posture, ensuring full alignment with NIST SP 800-171, DFARS 252.204-7012, and CMMC Level 2. The ideal candidate bridges the gap between technical execution and regulatory governance. You will be responsible for managing security operations, maintaining our System Security Plan (SSP), closing Plan of Action and Milestones (POA&M) items, and preparing the organization for a formal third-party CMMC assessment., * CMMC & NIST Governance: Own, update, and enforce the System Security Plan (SSP) and Plan of Action and Milestones (POA&M). Ensure all 110 practices of NIST SP 800-171 are fully implemented and auditable. * Infrastructure Security Oversight: Oversee the security posture of our technical stack, ensuring secure configurations across firewalls, Endpoint Detection and Response (EDR), Remote Monitoring and Management (RMM), and cloud environments. * Cloud & Tenant Security: Manage data enclave boundaries and security policies, specifically optimizing and maintaining a Microsoft 365 GCC High environment to prevent CUI spillage. * Data Flow & CUI Management: Map, audit, and control the flow of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) across all internal and external systems. * Incident Response & DFARS Reporting: Lead the incident response team. Ensure full compliance with DFARS 252.204-7012, including rapid reporting of cyber incidents to the DoD Cyber Crime Center (DC3) within 72 hours. * Vulnerability & Patch Management: Conduct regular internal audits, vulnerability scans, and risk assessments. Prioritize and remediate vulnerabilities across servers, endpoints, and network devices. * Vendor & Supply Chain Risk: Evaluate subcontractors and third-party vendors to ensure they meet mandatory DFARS flow-down requirements. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)