Employee-Owned InfoSec & Compliance Lead — CMMC/NIST

Technical Metal Specialties; New Berlin (WI); On-site; USD 76,500 - 93,500; Full time

Benefits offered by this job

Employee owned

3% 401k contribution

PTO and paid holidays

Hiring bonus $1,000

20 hours PTO at start

Job summary

Technical Metal Specialties in New Berlin, WI is seeking an Information Security and Compliance Specialist to lead CMMC/NIST SP 800-171 programs, develop policies, and maintain audit readiness.

You will collaborate with IT and business units to align controls with operations, conduct risk assessments, and ensure proper handling of sensitive data. This role offers a path to strengthen security postures across the organization.

Qualifications

• Bachelor’s degree with a technical major and 3 years of related experience.
• Alternatively 6 years of related experience in lieu of degree.
• Experience with CMMC / NIST SP 800-171 compliance.
• Knowledge of security policies and risk management.
• Audit readiness and documentation experience.

Responsibilities

• Lead and maintain CMMC / NIST SP 800-171 compliance program.
• Develop, analyze, and maintain: Security policies, procedures, and standards; SSP and POA&M.
• Identify compliance gaps and recommend remediation actions.
• Maintain audit evidence and ensure controls are documented and verifiable.
• Perform risk assessments and document findings.
• Partner with IT and business units to align controls with operational realities.
• Validate access control, endpoint security, and data handling practices.
• Support incident tracking, documentation, and post-incident review.
• Provide guidance on proper handling of sensitive data (including CUI, where applicable).

Skills

Security governance

Risk assessment

Compliance

Audit readiness

Access control

Endpoint security

Data handling

Education

Bachelor’s degree in a technical major

Tools

Crystal Reports

SSRS

Job description

Technical Metal Specialties in New Berlin, WI is seeking an Information Security and Compliance Specialist to lead CMMC/NIST SP 800-171 programs, develop policies, and maintain audit readiness.

You will collaborate with IT and business units to align controls with operations, conduct risk assessments, and ensure proper handling of sensitive data. This role offers a path to strengthen security postures across the organization.