The Role
Researches, develops, maintains, and releases cybersecurity compliance frameworks and evidence mappings. Interprets regulatory standards, creates controls and testing requirements, validates framework content, supports releases and integrations, and documents decisions. Collaborates with Product, Engineering, Delivery, and Customer Success teams, while engaging customers to explain framework behavior, gather feedback, and translate needs into content and product improvements.
Summary Generated by Built In
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies all across the world navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S., Argentina, and the U.K.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
The Compliance Framework Content Specialist supports the Compliance Essentials Content Team by researching, developing, maintaining, and releasing compliance frameworks and related evidence mappings. This role combines compliance expertise, analytical thinking, structured content management, and collaboration with Product, Engineering, Delivery, and Customer Success teams.
The ideal candidate can translate complex regulatory and industry requirements into accurate, usable framework content that supports assessments, evidence collection, reporting, and continuous compliance. They are also comfortable working directly with customers to understand their compliance workflows, explain product content and framework behavior, and turn customer feedback into clear, actionable input for the Content and Product teams.
What You'll Do
- Research and interpret compliance standards, regulations, frameworks, and industry requirements.
- Build and maintain baseline, baseline-modified, and custom compliance frameworks in accordance with established content standards.
- Develop and maintain requirements, controls, test procedures, evidence requests, applicability rules, and metadata.
- Create and review mappings between framework requirements, evidence requests, cloud controls, partner frameworks, and related content.
- Assess framework revisions and determine required updates to existing Compliance Essentials content.
- Collaborate with Delivery and subject-matter experts to validate framework structure, control language, evidence requirements, and mappings.
- Work directly with customers in discovery sessions, reviews, and feedback discussions to understand their compliance programs, framework usage, and content needs.
- Clearly explain framework structure, content scope, evidence expectations, and product behavior to customer audiences without overstating what the product or framework guarantees.
- Convert customer questions, feedback, and recurring pain points into documented requirements, content improvements, and product recommendations; follow through with internal teams and communicate outcomes.
- Facilitate customer-facing content walkthroughs, enablement sessions, or demonstrations as needed.
- Prepare framework content for lower-environment testing, release validation, and production deployment.
- Review generated framework files, mapping artifacts, and release packages for completeness, accuracy, consistency, and traceability.
- Participate in stage testing, content releases, change-log development, and post-release validation.
- Document content decisions, assumptions, dependencies, and known limitations.
- Support framework integrations and partner mapping initiatives using structured formats such as JSON, CSV, spreadsheets, or similar data models.
- Identify opportunities to improve content processes, automation, tooling, and quality controls.
- Contribute to internal training and enablement materials for assessors, Delivery teams, Support, and Customer Success.
- Monitor industry developments and emerging frameworks to inform the Content Team roadmap.
What You'll Bring
- 3+ years of experience in compliance, cybersecurity, audit, risk management, governance, or technical content development.
- Demonstrated experience working with one or more compliance frameworks, such as NIST, SOC 1/SOC 2, ISO, PCI, HIPAA, HITRUST, FedRAMP, CMMC, privacy, or AI governance frameworks.
- Experience with GCP.
- Strong ability to interpret authoritative source material and convert it into structured, actionable requirements.
- Experience creating or reviewing control-to-evidence, requirement-to-control, or framework-to-framework mappings.
- Strong attention to detail and commitment to content accuracy.
- Excellent written and verbal English communication skills.
- Ability to manage multiple framework initiatives and competing priorities.
- Ability to work effectively with technical and nontechnical stakeholders.
- Demonstrated ability or willingness to engage directly with customers in a professional, consultative, and customer-focused manner.
- Strong listening, discovery, presentation, and facilitation skills; able to ask clarifying questions and explain complex compliance concepts in clear, audience-appropriate language.
- Skill in managing customer expectations, documenting commitments and open questions, and translating feedback into actionable internal work.
Why You’ll Want to Join Us
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].
Skills Required
- 3+ years of experience in compliance, cybersecurity, audit, risk management, governance, or technical content development
- Experience working with one or more compliance frameworks, such as NIST, SOC 1/SOC 2, ISO, PCI, HIPAA, HITRUST, FedRAMP, CMMC, privacy, or AI governance frameworks
- Experience with GCP
- Ability to interpret authoritative source material and convert it into structured, actionable requirements
- Experience creating or reviewing control-to-evidence, requirement-to-control, or framework-to-framework mappings
- Strong attention to detail and commitment to content accuracy
- Excellent written and verbal English communication skills
- Ability to manage multiple framework initiatives and competing priorities
- Ability to work effectively with technical and nontechnical stakeholders
- Ability or willingness to engage directly with customers in a professional, consultative, and customer-focused manner
- Strong listening, discovery, presentation, and facilitation skills
- Ability to ask clarifying questions and explain complex compliance concepts in clear, audience-appropriate language
- Skill in managing customer expectations, documenting commitments and open questions, and translating feedback into actionable internal work
Coalfire Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Coalfire and has not been reviewed or approved by Coalfire.
-
Leave & Time Off Breadth — Flexible paid time off and paid parental leave are prominently offered, with remote/WFH support enabling time away when workload allows.
-
Healthcare Strength — Comprehensive medical, dental, vision, wellness resources, and an EAP are part of the core package. Carrier coverage and plan options are regularly highlighted across employer materials.
-
Retirement Support — A company‑matched 401(k) is included alongside other financial and development perks. This retirement benefit is consistently featured across benefits overviews.
Coalfire Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Coalfire is the cybersecurity advisor that helps private and public sector organizations avert threats, close gaps, and effectively manage risk. By providing independent and tailored advice, assessments, technical testing, and cyber engineering services, we help clients develop scalable programs that improve their security posture, achieve their business objectives, and fuel their continued success. Coalfire has been a cybersecurity thought leader for more than 20 years and has offices throughout the United States and Europe.
