Cybersecurity Risk and Compliance Manager

Patriot Machine Inc; Saint Charles (MO); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life/disability insurance

401(k) with employer contributions

Paid vacation and holidays

Job summary

Patriot Machine, Inc. in Saint Charles, MO, seeks a Cybersecurity Risk and Compliance Manager to develop and enforce the company’s cybersecurity strategy.

This hands-on role leads the CMMC program from assessment through certification and ongoing compliance, collaborating with executive leadership, IT, operations, HR, and external partners. The ideal candidate combines strategic leadership with practical technical expertise, supporting a Defense Industrial Base environment and managing security

Qualifications

• 3+ years of cybersecurity experience and/or experience in an information security role.
• Experience implementing NIST SP 800-171 security controls and related standards.
• Experience leading CMMC preparation, assessments, or certification initiatives.

Responsibilities

• Lead the organization's cybersecurity strategy, governance, and risk management program.
• Manage all CMMC readiness, implementation, certification, and continuous compliance activities.
• Develop and maintain policies, procedures, and security controls aligned with NIST SP 800-171 and CMMC.
• Oversee protection of CUI and other sensitive information.
• Conduct cybersecurity risk assessments and prioritize remediation efforts.
• Coordinate audits, assessments, and customer cybersecurity requirements.
• Manage incident response planning, investigation, reporting, and recovery activities.
• Monitor threats and implement appropriate defensive measures.

Skills

Cybersecurity leadership

Risk management

Regulatory compliance

Security governance

Policy development

Education

Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field

Tools

CMMC readiness processes

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Cybersecurity Risk and Compliance Manager

Full-time Regular St. Charles, MO, US

2 days ago Requisition ID: 7190

The Cybersecurity Risk and Compliance Manager is responsible for developing, implementing, and enforcing the organization's cybersecurity strategy while ensuring compliance with Department of Defense cybersecurity requirements. This is a hands-on role. This role will lead our Cybersecurity Maturity Model Certification (CMMC) program from assessment through certification and ongoing compliance, working closely with executive leadership, IT, operations, human resources, and external partners.

The ideal candidate combines strategic leadership with hands-on technical expertise and has experience supporting small to mid-sized organizations operating within the Defense Industrial Base.

Responsibilities:

• Lead the organization's cybersecurity strategy, governance, and risk management program
• Manage all CMMC readiness, implementation, certification, and continuous compliance activities
• Develop and maintain policies, procedures, and security controls aligned with NIST SP 800-171, CMMC, and other applicable regulatory requirements
• Oversee protection of Controlled Unclassified Information (CUI) and other sensitive company information
• Conduct cybersecurity risk assessments and prioritize remediation efforts
• Coordinate internal and external security audits, assessments, and customer cybersecurity requirements
• Manage incident response planning, investigation, reporting, and recovery activities
• Monitor cybersecurity threats and implement appropriate defensive measures
• Collaborate with IT leadership to ensure secure network architecture, endpoint protection, identity management, and cloud security
• Manage relationships with Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), consultants, and third-party assessors
• Report cybersecurity risks, compliance status, and key performance metrics to executive leadership
• Develop security budgets and recommend technology investments that support business objectives

Requirements:

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience)
• 3+ years of cybersecurity experience and/or experience in an information security role
• Demonstrated experience implementing NIST SP 800-171 security controls
• Experience leading CMMC preparation, assessments, or certification initiatives
• Strong knowledge of risk management frameworks and cybersecurity governance
• Experience developing security policies, standards, and procedures
• Excellent communication and leadership skills with the ability to work across all levels of the organization
• Applicant must be a U.S. Person
• Must be able and willing to obtain and maintain a U.S. security clearance if one is not currently held

Company Profile:

Patriot Machine, Inc. is a technologically advanced aerospace manufacturer headquartered in St. Charles, Missouri. We supply complex structural parts and assemblies made from aluminum, titanium and steel to America’s largest aircraft manufacturers. Our culture of innovation and continuous improvement attracts skilled workers who are looking for a challenge. We offer opportunities to learn, grow and help shape the future of aerospace by applying innovative approaches to problem-solving.

Patriot Machine is a woman-owned business currently consisting of over 190 employees and 277,000 square feet of manufacturing and office space. We recently expanded into a new advanced manufacturing facility with ample space for further growth. We provide employees the opportunity to work alongside industry experts at an ultramodern manufacturing company.

Patriot Machine offers an excellent benefits package including health, dental, vision, life/disability, 401(k) with employer contributions, paid vacation and holidays.