Skip to content

GRC

Federal Security Program Manager

Rhymetec logoRhymetecRemote in United StatesPosted 4mo ago

The full posting

Title: Federal Security Program Manager Location:Remote (United States)

About Rhymetec:Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cyber security and data privacy. Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs.

Job Responsibilities

  • Lead technical federal compliance programs from scoping to delivery at scale for Rhymetec’s customers with a focus on government contractor and federal agency requirements including CMMC, FedRAMP, and NIST 800-171.
  • Manage a small team of Security Analysts, driving performance through structured coaching, clear accountability measures, and consistent delivery of high-quality customer outcomes.
  • Build information security programs for Rhymetec’s clients. This includes conducting gap assessments against federal and commercial cyber security frameworks, conducting risk assessments, and building strategy for creating and enhancing cyber security programs aligned to NIST 800-53, CMMC, and FedRAMP baselines.
  • Achieve and maintain compliance for cyber security frameworks selected by Rhymetec’s customers.
  • Participate and manage CMMC, FedRamp, GovRamp, and other external audits on behalf of customers, and provide evidence to CPA’s and/or QSA’s.
  • Lead project management for Rhymetec’s customers and create tasks and milestones to achieve required objectives.
  • Ensure customers achieve the required security objectives such as compliance frameworks on time.
  • Monitor and enforce SLAs for responding to customer requests.
  • Develop methods of tracking project progress and performance. Analyze results to determine potential issues, risks, and enhancements.
  • Improve and maintain customer retention by serving as a trusted federal compliance advisor, guiding clients through the complexity of government security requirements and positioning Rhymetec as a long-term strategic partner.

Qualifications

  • 4+ years working in a federal cybersecurity and GRC space
  • Demonstrated ability to function in a fast-paced, multi-program environment with changing priorities
  • Previous experience in managing waterfall, hybrid, and agile delivery teams
  • Good leadership skills include the ability to influence and gain consensus in the absence of direct authority
  • Ability to anticipate potential problems and proactively troubleshoot to resolve issues
  • Understanding of cloud architecture and modern cloud systems
  • Project management and people management delegation skills
  • Federal certifications preferred (CCP highly preferred)
  • U.S. Citizenship or Permanent Residency is required
  • Availability to travel up to 2 weeks out of the year

Benefits

  • Employee Covered Medical Premiums (100%)
  • Dental and Vision Benefits
  • Company Paid Life Insurance
  • PTO and Sick Time, 11 Paid Holidays
  • Professional Development Opportunities
  • 401K Retirement Company Match (3%)
  • Summer Friday’s!

Rhymetec is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetic, disability, age, or veteran status.

Where you can be based

This position is 100% remote and open to applicants based in United States.

Text as Rhymetec published it; last compared with the original on 13 Nov 2026.

The application

Your details and LinkedIn, then 5 questions.

Keep these to handLinkedInCV (optional)Cover letter (optional)
  1. 1.
    The base salary range for this role is $135,000-$145,000. What are your base salary expectations?Short answer
  2. 2.
    Are you comfortable with a base salary within this range?Yes or no
  3. 3.
    How many years of work experience do you have in federal cybersecurity program management?Choose any: Less than 4 years · More than 4 years
  4. 4.
    This role requires experience with external security customers in a consulting aspect. Do you have external customer experience? *Please note this will be covered in your interview.Short answer
  5. 5.
    Do you have experience supporting and managing audits on behalf of your company and/or customer?Short answer

Taken from Rhymetec's application form as it stood on 13 Nov 2026.

The employer: Rhymetec

Rhymetec runs compliance and security programs for clients and has four remote openings: three US program and analyst roles and a London-listed GRC Analyst.

Pay and benefits: Client-facing compliance consulting, salaried and remote, in the US or UK.

Other security roles worth a look

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Rhymetec posts a security role

We read Rhymetec's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.