Director of Information Security (CISO)

VulcanForms Inc.; Ayer (MA); On-site; USD 161,000 - 222,000; Full time

Benefits offered by this job

Medical, dental, vision, and life

Generous time off and holidays

401(k) with company match and stock

Job summary

VulcanForms Inc. seeks a Director of Information Security to build and lead the company’s security program as it scales its digital manufacturing framework for aerospace, defense, and medical customers.

You will set strategy, policies, and controls while enabling rapid business progress. Reporting to the VP of IT, this hands‑on role requires hiring and developing a team, embedding security across IT, engineering, manufacturing, and legal, and ensuring compliance posture for CMMC, NIST 800‑171,

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field, or equivalent hands‑on experience.
• 10+ years of progressive information security experience, including 5+ years in a senior security leadership role.
• CISSP certification required.
• Demonstrated experience building or maturing a security program from an early stage.
• Direct experience with CMMC, NIST 800‑171, and/or ITAR/EAR compliance in manufacturing, defense, or aerospace.
• Strong knowledge of cloud security (AWS and/or Azure), network security, IAM, and endpoint protection.
• Experience securing OT/industrial environments or strong familiarity with IT/OT risks.
• Proven experience leading incident response and crisis management for security events.
• Excellent communication skills, translating technical risk into business terms for executives and customers.
• Must be a U.S. citizen.

Responsibilities

• Build and lead VulcanForms’ information security program from the ground up, defining strategy and governance as the company scales.
• Own compliance and certification efforts for CMMC, NIST 800‑171, and ITAR/EAR with legal and programs teams.
• Design and implement security policies, standards, and controls across IT, cloud, OT, and endpoints.
• Lead risk assessments and manage a remediation roadmap balancing security with scale.
• Establish incident response, continuity, and disaster recovery plans and lead security incident responses.
• Partner with IT, software, and manufacturing teams to secure production systems and printers.
• Manage security tooling and vendor relationships (SIEM, IAM, EDR, IAM, vulnerability mgmt).
• Build security awareness training and insider‑risk programs across the organization.
• Recruit, hire, and develop a security team and set technical/cultural standards.
• Serve as primary contact for customer security questionnaires, audits, and compliance assessments.
• Report security posture, risk, and compliance to executive leadership and the board.

Skills

Security leadership

Policy development

Risk management

Executive communication

Cloud security

Education

CISSP certification

Tools

SIEM

IAM

Endpoint protection

Vulnerability management

AWS/Azure security

Job description

About Us

Founded in 2015 to develop the world’s first industrially scalable laser metal additive manufacturing solution, VulcanForms is reshaping how the world manufactures critical products. We build and operate advanced digital infrastructure that enables innovation, accelerates growth, and supports sustainability across aerospace, defense, medical, and other essential industries. Through our vertically integrated capabilities, including scalable additive manufacturing and precision machining, we deliver true end-to-end production at scale by combining cutting‑edge technology with a foundation of proven industrial craftsmanship. Our team brings deep expertise in manufacturing, materials science, software, automation, and operations, united by a shared commitment to quality, curiosity, and accountability. We foster an inclusive culture where people take ownership, solve meaningful problems, and continuously learn, because we believe diverse perspectives lead to better outcomes.

VulcanForms Inc. seeks a Director of Information Security (CISO) for our Devens, MA, location.

About The Role

VulcanForms is seeking a Director of Information Security (CISO) to build and lead our information security program as we scale our digital manufacturing infrastructure for aerospace, defense, and medical customers. Reporting to the VP of IT, you’ll establish the strategy, policies, and controls that protect our intellectual property, production systems, and customer data, while enabling the business to move fast.

This is a hands‑on, founding role: you’ll build the security function from the ground up, standing up governance frameworks, hiring and developing a team over time, and partnering closely with IT, engineering, manufacturing, and legal to embed security into how VulcanForms designs, builds, and ships. Given our work with defense and aerospace customers, you’ll also own our compliance posture against frameworks like CMMC, NIST 800‑171, and ITAR/EAR, making sure certification and audit readiness keep pace with our growth.

Key Responsibilities

• Build and lead VulcanForms’ information security program from the ground up, defining strategy, roadmap, and governance as the company scales.
• Own compliance and certification efforts for CMMC, NIST 800‑171, and ITAR/EAR, partnering with legal, contracts, and program teams to meet customer and government requirements across our defense and aerospace work.
• Design and implement security policies, standards, and controls covering IT infrastructure, cloud environments, OT/manufacturing systems, and endpoints.
• Lead risk assessments and manage a prioritized remediation roadmap, balancing security rigor with the pace of a scaling manufacturing operation.
• Establish incident response, business continuity, and disaster recovery plans, and lead the organization’s response to security incidents when they occur.
• Partner with IT, software, and manufacturing engineering teams to secure production systems, industrial control systems, and the software that runs our printers and factories.
• Manage security tooling and vendor relationships, including SIEM, endpoint detection, identity and access management, and vulnerability management platforms.
• Build and mature security awareness training and insider‑risk programs across the organization.
• Recruit, hire, and develop a security team as the function grows, setting the technical and cultural bar for the group.
• Serve as the primary point of contact for customer security questionnaires, third‑party audits, and government compliance assessments.
• Report on security posture, risk, and compliance status to executive leadership and, as needed, the board.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent hands‑on experience.
• 10+ years of progressive information security experience, including 5+ years in a senior security leadership role (CISO, Director of Security, or equivalent).
• CISSP certification required.
• Demonstrated experience building or maturing a security program from an early stage, including policy development, risk management, and control implementation.
• Direct experience with CMMC, NIST 800‑171, and/or ITAR/EAR compliance in a manufacturing, defense, or aerospace environment.
• Strong knowledge of cloud security (AWS and/or Azure), network security, identity and access management, and endpoint protection.
• Experience securing OT/industrial environments or manufacturing systems, or strong familiarity with the unique risks of converging IT and OT.
• Proven experience leading incident response and crisis management for security events.
• Excellent communication skills, with experience translating technical risk into business terms for executive and customer audiences.
• Must be a U.S. citizen.

Preferred

• Additional certifications such as CISM or CCISO.
• Experience achieving or maintaining CMMC certification (Level 2 or above) for a manufacturing or defense contractor.
• Familiarity with export control regimes (ITAR/EAR) and working with classified or controlled unclassified information (CUI).
• Experience in an additive manufacturing, industrial, or advanced manufacturing environment.
• Background in a high‑growth or scale‑up company, building security functions with limited early headcount.
• Experience with security frameworks such as NIST CSF, ISO 27001, or SOC 2.
• Active U.S. Department of State clearance status.

Benefits

• Medical, dental, vision, and life insurance are available to you starting on your first day of employment.
• Generous time off package, including vacation PTO, sick PTO, and 14 company‑paid holidays.
• 401(k) with company match and stock options.

VulcanForms Inc. is committed to being an Equal Opportunity Employer, valuing employees with diverse, multi‑cultural perspectives. We are dedicated to fostering an inclusive environment, empowering our team, and embracing diversity. We welcome all applicants and ensure fair and impartial treatment regardless of race, color, religion, sex, national origin, ancestry, citizenship status, age, legally protected physical or mental disability, protected veteran status, status in the U.S. uniformed services, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by applicable federal, state, or local law.

The annual base salary range for this position is $161,000 to $222,000.