Aimed at senior compliance professionals with domain expertise in federal procurement and supply chain security who can manage cross-functional teams and navigate complex regulatory frameworks. The role is geographically anchored in Westerville, OH, and requires strong collaboration with legal, engineering, and manufacturing stakeholders.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from Vertiv
POSITION SUMMARY
The Government Compliance Sr. Manager ensures that our cloud and data center infrastructure meets strict federal procurement, supply chain, facility security, and cybersecurity mandates. This critical role protects the company's federal revenue streams by managing risks and developing standard operating procedures associated with CMMC, ICD 705 physical security, DPAS prioritization, BAA/TAA supply chains, GIDEP reporting, and OCONUS deployments.
RESPONSIBILITIES
Facility Security & ICD 705 Compliance
Monitor, implement, and ensure strict compliance with ICD 705 (Intelligence Community Directive 705) standards for Sensitive Compartmented Information Facilities (SCIFs) and Special Access Program Facilities (SAPFs) within data centers.
Oversee the physical and technical security construction profiles, ensuring alignment with ICD 705 Technical Specifications (Tech Specs) from initial design through formal accreditation.
Maintain comprehensive documentation, including Fixed Facility Checklists (FFCs) and Construction Security Plans (CSPs), for submission to the Accrediting Official (AO).
Cross-Functional Collaboration & Stakeholder Interface
Partner with Federal Sales and Business Development to review requests for proposals (RFPs) and ensure compliance feasibility before bid submission.
Embed compliance requirements into Procurement workflows to vet subcontractors and hardware vendors.
Advise Hardware Engineering on technical requirements for component qualification and design-in constraints.
Collaborate closely with Legal Counsel on contract review, regulatory risk assessments, and disclosure strategies.
Interface directly with Manufacturing teams to ensure production lines meet federal tracking and security baselines.
Supply Chain Integrity & GIDEP Responsibility
Serve as the designated corporate representative and administrator for the Government-Industry Data Exchange Program (GIDEP).
Monitor incoming GIDEP failure experience data, suspect counterfeit alerts, and diminishing source notices.
Author and submit official GIDEP alerts if counterfeit components or systemic equipment failures are found.
Lead root-cause investigations and implement material quarantine protocols for identified parts.
Cybersecurity & CMMC Governance
Lead data center operational alignment with CMMC 2.0 Level 2 and NIST SP 800-171 controls.
Partner with IT Security to safeguard Controlled Unclassified Information (CUI) across environments.
Manage systemic security gaps by documenting and tracking Plans of Action and Milestones (POAMs).
DPAS Optimization & Supply Chain Priority
Optimize standard operating procedures for DPAS rated orders to achieve compliance.
Enforce mandatory flow-down requirements to hardware vendors, subcontractors, and construction partners.
Resolve resource allocation conflicts between commercial projects and rated defense infrastructure orders.
Trade & Supply Chain Compliance (BAA/TAA)
Administer compliance verifications for the Buy American Act (BAA) and Trade Agreements Act (TAA).
Audit multi-tiered hardware supply chains to verify the country of origin for critical infrastructure components.
Implement strict component-tracking workflows to mitigate the risk of counterfeit or non-compliant hardware.
OCONUS Sales & Global Compliance
Oversee international compliance frameworks for OCONUS data center sales and material deployments.
Partner with trade legal teams to clear export licensing requirements under ITAR and EAR regulations.
Ensure overseas field engineering teams comply with localized defense regulations and Status of Forces Agreements (SOFA).
Audit & Contractor Business Systems
Lead corporate responses to federal infrastructure audits conducted by the DCMA and DCAA.
Maintain continuous verification for relevant DFARS Contractor Business Systems used in pricing.
Author official corporate policy manuals governing strict federal data privacy and supply chain ethics.
Participate in FCL
Duties as required
MINIMUM QUALIFICATIONS
Bachelor’s degree in Cybersecurity, Supply Chain Management, Business Administration, Legal Studies or related field.
7+ years of progressive federal compliance experience (or 5+ years with an active Top Secret/SCI clearance and relevant certifications such as CISSP or CCP).
Demonstrated GIDEP database administration, including identification, tracking, and reporting of hardware deficiencies and counterfeit alerts
Direct ICD 705 physical security management experience or coordination with Facility Security Officers (FSOs) for SCIF accreditation
Proven track record managing DPAS priority ratings and BAA/TAA country-of-origin certification workflows
Experience leading corporate responses to DCMA/DCAA federal infrastructure audits
Matrix-influence skills to align cross-functional teams (Sales, Engineering, Manufacturing, Legal) toward shared compliance outcomes
Strong technical acumen in data center power, cooling, and hardware architectures
Analytical rigor to audit multi-tiered supply chains and country-of-origin documentation
Executive-level communication skills to bridge technical, commercial, and regulatory audiences
Technical & Regulatory Knowledge
Deep operational knowledge of FAR/DFARS procurement clauses
Working proficiency in ICD 705 Technical Specifications, CMMC 2.0 Level 2, NIST SP 800-171, and FedRAMP security baselines
Familiarity with EAR/ITAR export classification frameworks and OCONUS deployment requirements
Understanding of CUI handling requirements and DFARS Contractor Business Systems
Knowledge of FedRAMP authorization processes for federal cloud workloads
Familiarity with cyber incident reporting requirements under DFARS 252.204-7012
Awareness of Cyber Supply Chain Risk Management (C-SCRM) principles
Familiarity with NIST SP 800-137 continuous monitoring frameworks
PREFERRED QUALIFICATIONS
Master’s Degree in Cybersecurity, Supply Chain Management, Business Administration, or Legal Studies
Active U.S. government security clearance
Certified Information Systems Security Professional (CISSP) or Certified CMMC Professional (CCP)
Certified Professional Contracts Manager (CPCM) or Certified Federal Contracts Manager (CFCM)
Facility Security Officer (FSO) certification or Industrial Security Professional (ISP) credential
Project Management Professional (PMP) or equivalent certification
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, or equivalent)
Familiarity with TIA-942 or Uptime Institute data center physical security standards
PHYSICAL & ENVIRONMENTAL DEMANDS
Standard office environment.
TIME TRAVEL REQUIRED
10%
The successful candidate will embrace Vertiv’s Core Principles & Behaviors to help execute our Strategic Priorities.
OUR CORE PRINCIPLES: Safety. Integrity. Respect. Teamwork. Inclusion.
OUR STRATEGIC PRIORITIES
- High-Performance Culture
- Customer Focus
- Operational Excellence
- Innovation
- Financial Strength
VERTIV BEHAVIORS
- Own it
- Act with urgency
- Foster a customer-first mindset
- Think big and execute
- Lead by example
- Drive continuous improvement
- Learn and seek out development
- Promote transparent & open communication
About Vertiv
Vertiv (NYSE: VRT) brings together hardware, software, analytics and ongoing services to enable its customers’ vital applications to run continuously, perform optimally and grow with their business needs. Vertiv solves the most important challenges facing today’s data centers, communication networks, and commercial and industrial facilities with a portfolio of power, cooling and IT infrastructure solutions and services that extend from the cloud to the edge of the network. Headquartered in Westerville, Ohio, USA, Vertiv employs around 34,000 people and does business in more than 130 countries. Visit Vertiv.com to learn more.
Work Authorization
No calls or agencies please. Vertiv will only employ those who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided. Individuals with temporary visas such as E, F-1, H-1, H-2, L, B, J, or TN or who need sponsorship for work authorization now or in the future, are not eligible for hire.
Equal Opportunity Employer
Vertiv is an Equal Opportunity/Affirmative Action employer. We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation, and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status (including childbirth, breastfeeding, or related medical conditions), marital status, sexual orientation, gender identity / expression (including transgender status or sexual stereotypes), genetic information, citizenship status, national origin, protected veteran status, political affiliation, or disability. If you have a disability and are having difficulty accessing or using this website to apply for a position, you can request help by sending an email to help.join@vertiv.com
Source: Vertiv careers