Cyber74

Role Description Cyber74, a New Charter Technologies operating company, is building a new practice focused on AI security — and we are looking for a Security / AI Cloud Engineer to help launch it. In this role, you will work at the intersection of cloud security and artificial intelligence, helping our clients adopt AI tools and platforms safely. You will configure and manage security controls across AI-enabled environments, including data loss prevention policies, abuse alerting, and misconfiguration remediation. This is a greenfield opportunity to define a new service area within Cyber74, influence our methodology, and become one of the company's go-to experts in AI security as clients increasingly integrate AI into their operations. Primary Responsibilities - Design, implement, and manage security controls for AI platforms and cloud environments used by Cyber74 clients (Microsoft 365 Copilot, Azure OpenAI, Google Workspace AI, and similar) - Configure and tune Data Loss Prevention (DLP) policies to prevent sensitive data exposure through AI tools and integrations - Develop and maintain alerting rules to detect abuse, anomalous behavior, and policy violations within AI-enabled platforms - Identify, remediate, and track security misconfigurations across AI and cloud environments using industry frameworks and tooling - Conduct security assessments of client AI deployments to identify gaps, risks, and areas for hardening - Collaborate with the vCISO and compliance teams to incorporate AI security considerations into broader client security programs - Document findings, configurations, and procedures; produce clear reports for both technical and executive audiences - Monitor the evolving AI security landscape and recommend new controls, tools, or policies as AI capabilities and threats develop - Support pre-sales and scoping conversations by contributing technical expertise to proposals and client discussions Qualifications - 3+ years of experience in cloud security, security engineering, or a related role - Hands-on experience with Microsoft 365 security tools (Defender, Purview/DLP, Conditional Access, Sentinel) or equivalent Google/AWS platforms - Familiarity with AI platforms and their security surfaces: Microsoft Copilot, Azure OpenAI, ChatGPT Enterprise, Google Gemini, or similar - Experience configuring DLP policies, CASB solutions, or similar data security controls in cloud environments - Working knowledge of CSPM tools (Microsoft Defender for Cloud, Prisma Cloud, Wiz, or similar) for identifying misconfigurations - Understanding of zero-trust architecture principles and their application to AI workloads - Relevant certifications preferred: AZ-500, SC-200, SC-400, CCSP, or equivalent cloud/security certifications - Strong documentation and communication skills; ability to explain complex security concepts to non-technical stakeholders Preferred Attributes - Intellectually curious and energized by emerging technology; excited to build something new rather than maintain the status quo - Comfortable operating with ambiguity in a greenfield role where processes are still being defined - Collaborative and team-oriented, able to work cross-functionally with compliance, engineering, and client-facing teams - Strong problem-solving skills with a proactive approach to identifying risks before they become incidents - Passion for AI and security; keeps up with industry news, emerging threats, and evolving best practices - Client-focused mindset with the ability to build trusted relationships and communicate findings with clarity and credibility Salary Salary range of $110k to $130k Dependent on Experience Company Description Cyber74, a New Charter Company, is committed to creating an inclusive environment and is proud to be an equal opportunity employer. Cyber74 recruits, employs, trains, compensates, and promotes regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

Role Description Cyber74, a New Charter Technologies operating company, is seeking a Compliance Team Lead to help scale and strengthen our growing compliance practice. This is a hands-on, client-facing role — approximately 70% of your time will be spent personally delivering compliance work directly with clients, with the remaining 30% focused on team leadership and practice development. You are a practitioner first and a leader second. The core of this role is helping Cyber74 build and mature our SOC 2, ISO 27001, and PCI DSS service delivery — developing the internal frameworks, methodologies, and client-facing playbooks that will define how we deliver compliance as a practice. You will also mentor junior team members and contribute to the evolution of our service offerings, all while maintaining direct ownership of client engagements. Primary Responsibilities - Personally lead and execute compliance engagements for clients — this is a doing role, not just a directing role. - Serve as the primary hands-on point of contact for client compliance work, managing engagement delivery from kickoff through audit readiness. - Conduct gap analyses, readiness assessments, and risk reviews directly with clients, identifying control deficiencies and building actionable remediation roadmaps. - Develop, write, and maintain client-facing policies, procedures, and control documentation — producing real deliverables, not just reviewing others' work. - Help build and continuously refine Cyber74's internal compliance frameworks, service delivery methodology, templates, and playbooks from the ground up. - Mentor and guide junior compliance staff, reviewing their work and supporting their development without offloading core client responsibilities. - Collaborate with internal security engineers and vCISO team members to deliver integrated security and compliance solutions. - Track regulatory and framework updates to keep client programs current and audit-ready. - Support business development by contributing to proposals, scoping conversations, and client presentations based on direct subject matter expertise. Qualifications - 3–5+ years of hands-on experience personally executing engagements across SOC 2 (Type I & II), ISO 27001, and/or PCI DSS — not just program oversight. - Demonstrated ability to independently run a compliance engagement end-to-end: scoping, gap analysis, control mapping, evidence collection, and audit preparation. - Experience in a managed services or consulting environment strongly preferred. - Familiarity with GRC platforms, particularly IntelliGRC (Cyber74's platform of record); experience with Drata, Vanta, Tugboat Logic, or similar tools also valued. - Proven ability to write information security policies, risk assessments, and audit evidence packages from scratch. Requirements - Starting salary of 110k and up based on experience. - Exposure to HIPAA, NIST CSF, or CMMC is a bonus — candidates who excel in our core frameworks are encouraged to apply even without depth in these areas. - Relevant certifications are a plus: CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor/Implementer. Preferred Attributes - A practitioner at heart — energized by doing the work, not just managing it. - Proven ability to build from scratch: frameworks, processes, and templates in environments where they don't yet exist. - Detail-oriented and process-driven, with a strong commitment to quality and consistency across every client deliverable. - Self-motivated and comfortable working independently in a remote or hybrid environment. - Collaborative and adaptable, able to work across teams and adjust to evolving client needs. - Growth mindset with an interest in developing new compliance capabilities over time. - Comfortable engaging at the executive level and translating compliance requirements into clear business language. Company Description Cyber74, a New Charter Company, is committed to creating an inclusive environment and is proud to be an equal opportunity employer. Cyber74 recruits, employs, trains, compensates, and promotes regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.