Cybersecurity Compliance Manager

Job Description

Insight Global is looking for Manager of Cybersecurity Compliance to work on site in Austin, TX and support the strategy and introduction of products based on unique and highly differentiated capabilities of a preeminent foundry for semiconductor systems and defense electronics companies. Their mission is to advance the state-of-the-art in critical semiconductor domains such as advanced packaging, and in the process to help restore U.S. leadership in semiconductor manufacturing. They are developing cutting-edge semiconductor manufacturing technology that will define future roadmaps of semiconductor devices including logic, memory, 3D packaged devices, including thermal management, etc. The Manager of Cybersecurity Compliance will lead the strategic development, implementation, and continuous improvement of the organization's cybersecurity compliance program supporting Controlled Unclassified Information (CUI), regulated manufacturing environments, and federal contract requirements. This individual will oversee the governance, risk, and compliance (GRC) framework for semiconductor manufacturing operations, research laboratories, engineering systems, operational technology (OT), and enterprise infrastructures.

The ideal candidate possesses deep expertise in CMMC 2.0, NIST SP 800-171, NIST 800-53, RMF, and semiconductor manufacturing cybersecurity requirements. The Director will partner with executive leadership, engineering, manufacturing, facilities, IT, and government stakeholders to ensure compliance while enabling business growth, intellectual property protection, and operational resilience.

Responsibilities: Responsible for ensuring information systems follow government and their internal regulations while meeting program demands and operating in an accredited state. Assist in daily IT governance, risk management, and compliance function. Providing oversight of compliance assurance, for the daily administration of information security measures in compliance with the NIST SP 800-171, CMMC level 2, and other relevant system security requirements to include those under the Risk Management Framework (RMF). Responsible for assisting in ensuring that controlled unclassified information systems meet the Risk Management Framework goals required by their government clients Responsible for drafting detailed reports of compliance and self-inspections outcomes, for upper management review. Other related functions as assigned.

Key Responsibilities:

Cybersecurity Compliance Leadership: Establish and execute enterprise-wide cybersecurity compliance strategies supporting CUI environments and federal contracts. Serve as the senior compliance authority for CMMC, NIST SP 800-171, NIST SP 800-53, NIST Cybersecurity Framework (CSF), DFARS, and related regulatory requirements. Lead organizational readiness efforts for CMMC Level 2 and future certification assessments. Develop governance frameworks, policies, standards, and procedures supporting secure handling of CUI and other sensitive information assets. Brief executive leadership and government stakeholders on cybersecurity risks, compliance posture, remediation activities, and audit readiness.

CUI & Government Program Security: Maintain compliance across all CUI information systems, enclaves, cloud environments, and engineering platforms. Oversee CUI boundary definition, system scoping, data-flow mapping, and asset inventories. Ensure secure storage, transmission, retention, and destruction of CUI in accordance with federal requirements. Collaborate with program teams supporting DoD, DARPA, and other government initiatives. Guide implementation of security controls and POA&M management activities.

Semiconductor Manufacturing & Operational Technology Security: Provide cybersecurity governance for semiconductor fabrication, packaging, testing, and R&D environments. Partner with manufacturing engineering, facilities, automation, and MES teams to implement secure OT practices. Establish security requirements for: Manufacturing Execution Systems (MES) Equipment automation platforms SCADA and industrial control systems Cleanroom operational infrastructure Supply chain and vendor connectivity HPC and engineering compute environments Develop cybersecurity standards for semiconductor tools, vendor integrations, and production networks.

Risk Management & Audit Oversight: Lead enterprise risk assessments and control evaluations. Direct internal and external cybersecurity audits. Manage remediation programs, vulnerability assessments, and control validation activities. Track security metrics, compliance KPIs, and regulatory obligations. Oversee third-party risk management and supplier cybersecurity reviews.

Security Operations & Continuous Monitoring: Partner with Security Operations to establish continuous monitoring programs. Oversee compliance-related vulnerability management, configuration management, and endpoint security initiatives. Ensure audit logs, monitoring tools, and evidence repositories support compliance objectives. Guide incident response activities involving regulated systems and CUI assets.

Team Leadership: Build and lead a high-performing cybersecurity compliance and GRC organization. Mentor cybersecurity professionals, ISSOs, auditors, and compliance analysts. Manage budgets, compliance roadmaps, staffing plans, and external consulting engagements. Foster a culture of cybersecurity awareness and accountability throughout manufacturing operations.

Skills and Requirements

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Systems, or a related discipline. 10+ years of cybersecurity experience with at least: 5+ years leading cybersecurity compliance or GRC programs. 3+ years supporting regulated or government-contracted environments. Demonstrated expertise implementing: CMMC 2.0 NIST SP 800-171 NIST 800-53 NIST Cybersecurity Framework Risk Management Framework (RMF) Experience managing audits, assessments, and accreditation activities. Experience developing and managing Plans of Action and Milestones (POA&Ms). Strong understanding of identity management, vulnerability management, incident response, and secure architecture principles. Experience presenting technical and compliance risks to executive leadership. Semiconductor or Defense Manufacturing background

Certifications (One or More Preferred): CISSP CISM CISA CRISC CGRC (formerly CAP) SecurityCCSP Certified CMMC Professional (CCP) Certified CMMC Assessor (CCA)

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].