[Hiring] Compliance Program Manager @RSI Security

Role Description

The Compliance Program Manager owns the full lifecycle of compliance frameworks across the organization, from regulatory monitoring and internal program readiness through to the productization and launch of new service offerings. This role is the single accountable owner for knowing what is changing in the regulatory and framework landscape, determining what the organization must do about it internally, and converting qualifying frameworks into repeatable, sellable, deliverable service lines.

This is a hybrid compliance and product role. Approximately half the seat is program management and the other half is product management.

Core Responsibilities

• Compliance Program Ownership
• Own the organization-wide compliance framework calendar, tracking rule changes, standard revisions, program updates, and authorization requirements across all frameworks the company operates under or delivers against.
• Maintain a current obligations register mapping each external requirement to an internal owner, control, artifact, and evidence location.
• Drive internal readiness for new and renewing authorizations, accreditations, and program approvals, including document production, gap closure, and submission coordination.
• Coordinate internal audits, surveillance activities, and external assessment cycles, including scheduling, evidence collection, corrective action tracking, and closure verification.
• Track and drive corrective actions, nonconformities, and findings to documented closure with defined owners and due dates.
• Monitor regulatory and standards bodies for changes affecting the organization's authorizations, delivery methodologies, or service eligibility, and issue timely impact analyses to leadership.
• Maintain the compliance obligations documentation set, ensuring version control, currency, and traceability.
• Serve as the internal subject matter expert on framework requirements, providing authoritative interpretation to delivery, sales, and leadership teams.
• Escalate impartiality, independence, conflict of interest, and eligibility questions to the appropriate authority rather than resolving them unilaterally.

• Productization and Offering Ownership
• Evaluate emerging and revised frameworks for market opportunity, producing a written business case covering demand signal, competitive landscape, required capability, margin profile, and go/no-go recommendation.
• Own the end-to-end productization of approved offerings, including scope definition, deliverable set, methodology, work breakdown structure, level of effort model, and quality gates.
• Partner with Finance and Sales leadership to develop pricing, rate card entries, and margin targets for new offerings.
• Build and maintain the delivery artifact set for each offering, document templates, evidence requirements, and reporting formats.
• Partner with TAC and delivery leadership to define staffing requirements, required credentials, and technical readiness for each new offering.
• Develop and deliver enablement materials for Sales, RFP, and delivery teams, including positioning, qualification criteria, and scoping guidance.
• Own the launch plan and post-launch review for each new offering.
• Maintain the offering portfolio, identifying offerings that should be revised, repriced, consolidated, or retired.
• Partner with Marketing on messaging accuracy and technical claim review for all compliance-related content.

Right Mindset & Cultural Fit

• You read primary sources rather than relying on summaries, vendor blogs, or secondhand interpretation.
• You are comfortable owning an outcome without owning the people who produce it.
• You bring a recommendation, not just a problem, and you can defend it with evidence.
• You are equally comfortable in a requirements document and in a pricing model.
• You move quickly on market opportunity without cutting corners on compliance obligations.
• You escalate independence and impartiality questions early rather than working around them.
• You write clearly enough that a salesperson, a project manager, and an assessor can all act on the same document.
• You align with RSI's Core Values and commitment to quality.

Misalignment Indicators

• Learns about a framework or regulatory change after the market or a client does.
• Allows corrective actions, findings, or obligations to sit open without escalation.
• Produces offerings that Sales cannot sell or that delivery cannot execute profitably.
• Treats productization as documentation work rather than as owning a commercial outcome.
• Defers framework interpretation questions upward instead of developing authoritative command of the requirements.
• Launches offerings without pricing, staffing, delivery templates, and enablement in place.
• Resolves impartiality or independence questions unilaterally rather than routing them to the appropriate authority.
• Cannot establish credibility with delivery leads, assessors, or client-facing teams.