The Role
Lead public sector cybersecurity advisory engagements, manage and mentor consultants, oversee compliance assessments (FedRAMP, CMMC, FISMA, DISA Cloud SRG), review and produce security documentation, conduct technical testing and interviews, advise on security posture, collaborate with sales and delivery, and contribute to practice development and quality assurance.
Summary Generated by Built In
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Position Summary:
The Manager, Public Sector Advisory will support Public Sector advisory engagements while managing and mentoring team members. The role combines people leadership, project delivery, and client engagement, with accountability for high-quality delivery, project margin, utilization, and adherence to established methodologies.
You will lead and support advisory engagements across the Public Sector frameworks, maintain strong client relationships throughout the engagement lifecycle, and provide oversight across compliance frameworks such as FedRAMP, CMMC, DISA Cloud SRG, FISMA, etc.
This role includes reviewing and developing compliance documentation, ensuring quality through peer reviews, collaborating with internal stakeholders, and supporting IT security consulting for cloud and on‑premises environments.
As a leader, you will mentor locally based consultants, foster client relationships and lead various engagements within the Public sector advisory team. As part of your responsibilities, you will directly manage and mentor 2-3 team members, building a culture of accountability and excellence while nurturing high-trust partnerships with clients and stakeholders across all levels of their organizations throughout the engagement lifecycle. This role requires a deep understanding of compliance framework requirements, including the list of frameworks noted above. You will provide advisory consulting support, develop compliance-related reports and documentation, and ensure quality control through peer reviews of project deliverables. Collaboration will be central to your work, as you’ll partner with sales, quality management, and delivery teams to ensure project timelines and deliverables are met while maintaining strong customer satisfaction. Mentorship and coaching will be key elements of your leadership. You will guide team members in technology, consulting methodologies, technical reviews, and professional writing, ensuring they meet project margin and utilization targets. Additionally, your expertise will contribute to the success of IT system security consultations for both cloud-based and on-premises environments. As a relationship builder, you’ll establish trust with accounts, identify upsell and cross-sell opportunities, and escalate these to the sales team as appropriate. Your ability to cultivate collaborative partnerships will ensure client satisfaction across all engagements. To stay ahead of industry trends, you’ll actively pursue professional development opportunities and encourage continuous updates to team policies, procedures, and training in alignment with best practices. Finally, your strategic contributions will support organizational goals, helping grow the service line and expand the team’s capabilities. By focusing on successful project outcomes and client satisfaction, this role will blend technical expertise, leadership, and strategic vision to drive the success of the Public sector advisory team.
What You'll Do
- Directly manage and mentor consultants, fostering a culture of accountability, collaboration, and continuous improvement.
- Provide day-to-day leadership, coaching, and performance feedback to team members aligned with project and practice expectations.
- Support team member onboarding, training, and ongoing skills development.
- Assist with resourcing decisions, workload planning, project margin and utilization management.
- Support advisory engagements across the full project lifecycle, including planning, execution, review, and closure.
- Maintain clear, professional communication with client stakeholders at multiple levels.
- Escalate project risks, issues, or resourcing concerns in a timely and effective manner.
- Partner with internal delivery, quality, and sales teams to ensure client satisfaction and successful outcomes.
- Identify potential upsell and cross-sell opportunities and escalate them to appropriate sales stakeholders.
- Execute and oversee compliance assessments aligned with recognized frameworks, including but not limited to FedRAMP, CMMC, DISA Cloud SRG, and various international frameworks noted in the description above.
- Lead and perform interviews, examinations, and testing procedures to validate control implementation.
- Develop, review, and maintain IT security documentation, including policies, procedures, risk assessments, and supporting artifacts.
- Advise clients on improving security programs, compliance posture, and risk management practices.
- Support IT system security initiatives for both cloud-based and on-premises environments.
- Perform quality reviews of project deliverables to ensure accuracy, completeness, and alignment with framework requirements.
- Mentor project teams on compliance methodologies, technical standards, and professional writing.
- Stay current with industry trends, emerging risks, and evolving compliance requirements.
- Contribute to the development and maintenance of internal policies, procedures, tools, and training materials.
People Management
Client Engagement & Project Delivery
Technical Execution
Quality, Knowledge & Practice Contribution
What You'll Bring
- Minimum of 5 years or more of working experience in information technology, information security, technical assessment, or audits
- Substantial knowledge of security control requirements (NIST, FISMA, FedRAMP, CMMC, DoD, etc.) and how they overlap with additional frameworks
- Significant experience in understanding and applying relevant technical knowledge in FISMA/FedRAMP and other compliance framework assessments within moderate and large hyperscale CSP environments
- Knowledge in conducting multi-framework consolidated compliance assessment activities
- Detailed understanding of IT security technologies including network and application security, firewalls, access management, and data protection
- Experience with virtualization and cloud technologies
- Experience with client-server and traditional on-premises architecture
- Familiarity with statutes and regulations across multiple industries relevant to IT
- Demonstrated ability to lead moderately complex system assessments/consulting engagements independently
- Demonstrated ability to assist team members with proper artifact collection and interviewing clients to ascertain control implementation details
- Demonstrated ability to read and interpret all control families
- Demonstrated ability to read and interpret firewall rulesets and to create network/boundary/data flow diagrams
- Strong written and verbal communication skills including the ability to explain technical matters to a non-technical audience
- Strong consulting skills; ability to advise and challenge the status quo while building strong relationships
- Ability to build high-trust relationship and credibility quickly
- Ability to lead projects successfully and delegate up and across
- Strong attention to detail
- Strong problem solving, decision making, organizational and analytical skills
- Ability to prioritize and manage multiple initiatives/projects.
- Ability to be self-driven and have strong independent initiative.
- Strong excel skills with ability to develop worksheets with complex formulas
- Ability to facilitate meetings to small or large groups
- Diplomatic and broad minded
- Ability to lead teams small to large teams in the assessment and internal environments
- Ability to speak to Cloud Service Providers to resolve issues and come to a conclusion of the assessment
- At least one of the following Advanced certifications or equivalent in cybersecurity or cloud: CISSP, CISA, CISM, CAP, CRISC, CMMC CCP, and/or cloud specific certification (AWS,GCP, or Azure) or specialty certification in security
- Bachelor's degree (four-year college or university) or equivalent education and experience
Bonus Points
- Strong knowledge of container-based architectures
- Knowledge of various cloud environments, including AWS, GCP, and Azure.
- Bachelors of Science degree in a technical field (CIS, MIS, IT, Engineering, or related field)
Why You’ll Want to Join Us
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].
Skills Required
- Minimum of 5 years experience in information technology, information security, technical assessment, or audits
- Substantial knowledge of security control requirements (NIST, FISMA, FedRAMP, CMMC, DoD)
- Experience performing FISMA/FedRAMP and other compliance framework assessments in moderate and large hyperscale CSP environments
- Experience conducting multi-framework consolidated compliance assessments
- Detailed understanding of IT security technologies including network and application security, firewalls, access management, and data protection
- Experience with virtualization and cloud technologies
- Experience with client-server and traditional on-premises architecture
- Familiarity with statutes and regulations across multiple industries relevant to IT
- Demonstrated ability to lead moderately complex system assessments/consulting engagements independently
- Ability to assist team members with artifact collection and client interviews to ascertain control implementation
- Ability to read and interpret all control families
- Ability to read and interpret firewall rulesets and create network/boundary/data flow diagrams
- Strong written and verbal communication skills, including explaining technical matters to non-technical audiences
- Strong consulting skills; ability to advise and challenge the status quo while building relationships
- Ability to build high-trust relationships and credibility quickly
- Ability to lead projects successfully and delegate up and across
- Strong attention to detail
- Strong problem solving, decision making, organizational and analytical skills
- Ability to prioritize and manage multiple initiatives/projects
- Self-driven with strong independent initiative
- Strong Excel skills with ability to develop worksheets with complex formulas
- Ability to facilitate meetings for small or large groups
- Diplomatic and broad minded
- Ability to lead small to large teams in assessment and internal environments
- Ability to engage with Cloud Service Providers to resolve assessment issues
- At least one advanced certification (CISSP, CISA, CISM, CAP, CRISC, CMMC CCP) or cloud-specific certification (AWS, GCP, Azure) or equivalent
- Bachelor's degree (four-year college or university) or equivalent education and experience
- Strong knowledge of container-based architectures
- Knowledge of various cloud environments, including AWS, GCP, and Azure (depth beyond basic experience)
- Bachelors of Science degree in a technical field (CIS, MIS, IT, Engineering, or related field)
Coalfire Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Coalfire and has not been reviewed or approved by Coalfire.
-
Leave & Time Off Breadth — Flexible paid time off and paid parental leave are prominently offered, with remote/WFH support enabling time away when workload allows.
-
Healthcare Strength — Comprehensive medical, dental, vision, wellness resources, and an EAP are part of the core package. Carrier coverage and plan options are regularly highlighted across employer materials.
-
Retirement Support — A company‑matched 401(k) is included alongside other financial and development perks. This retirement benefit is consistently featured across benefits overviews.
Coalfire Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Coalfire is the cybersecurity advisor that helps private and public sector organizations avert threats, close gaps, and effectively manage risk. By providing independent and tailored advice, assessments, technical testing, and cyber engineering services, we help clients develop scalable programs that improve their security posture, achieve their business objectives, and fuel their continued success. Coalfire has been a cybersecurity thought leader for more than 20 years and has offices throughout the United States and Europe.
.png)
