Information Security Manager

Take ownership of the existing CMMC Level 2 compliance program, complete remaining controls and documentation, manage remediation, and lead preparation for third-party certification Implement, administer, monitor, and troubleshoot cybersecurity controls across the Microsoft cloud environment, including identity management, endpoint security, incident response, and security configurations Work directly with IT leadership to communicate program status, recommend technical solutions, coordinate compliance efforts, and help develop a dedicated security team supporting commercial and government operations

Hands-on CMMC Level 2 / NIST 800-171 compliance experience, including implementing security controls, managing SSPs/POA&Ms, preparing for audits, and supporting CMMC programs Practical experience with Microsoft cloud security, identity/authentication, access controls, and the ability to implement, troubleshoot, and maintain technical security controls 5+ years of relevant professional experience managing technical security initiatives, independently driving remediation, assessing risk, and coordinating with IT leadership US citizenship or Green Card status

Desired: Experience with Microsoft GCC High, Microsoft Sentinel, Defender, Entra ID, Intune, and related Microsoft enterprise security technologies Previous DoD contracting/CUI experience, CMMC assessment involvement, CISSP/CISM/Security+ certifications, or experience leading technical security teams Bachelor’s degree preferred