Information Security and Compliance Specialist

D&S Manufacturing; Black River Falls (WI); On-site; USD 51,000 - 85,000; Full time

Benefits offered by this job

Employee owned

Health deductible coverage

3% 401k contribution

PTO

9 paid holidays

Hiring bonus $1,000

Quarterly incentive pay

Job summary

D&S Manufacturing in Black River Falls, WI is seeking an IT security professional to develop and enforce security policies, manage CMMC/NIST SP 800-171 compliance, and ensure audit readiness through structured documentation and risk management. The role emphasizes governance, risk, and compliance while providing limited Tier 1/2 IT support to stay aligned with user workflows.

The position is 1st shift, full-time, with a competitive package including health benefits, 100% paid health insurance

Qualifications

• Bachelor’s degree in a technical field with 3+ years’ related experience, or 6 years of equivalent experience.
• Experience with CMMC/NIST SP 800-171 compliance and audit readiness.
• Experience with Epicor ERP and T-SQL.
• Experience with reporting tools Crystal Reports/SSRS.

Responsibilities

• Lead CMMC/NIST SP 800-171 compliance program.
• Develop and maintain security policies, SSP, and POA&M.
• Identify compliance gaps and recommend remediation actions.
• Maintain audit evidence and ensure controls are documented and verifiable.
• Perform risk assessments and document findings.
• Partner with IT and business units to align controls with operations.
• Provide guidance on handling of sensitive data (including CUI).

Skills

GRC knowledge

Risk assessment

Policy development

Audit readiness

Education

Bachelor's degree in a technical field

Tools

Epicor

T-SQL

Crystal Reports

SSRS

Job description

D&S Manufacturing is looking to expand their Team in Black River Falls, WI.

Why join the team at D&S Manufacturing? We are 100% employee owned! D&S also pays 100% of your health insurance deductible, along with contributing 3% into your 401k automatically. We also have a competitive paid time off plan, along with 9 paid holidays. Plus, you will receive $1,000 hiring bonus along with 20.0 hours of PTO. D&S also has a quarterly incentive pay plan.

1st Shift/Full-Time: Hours are flexible

With experience, make up to $85,000/year.

Summary

Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management. Primary focus: governance, risk, compliance, and audit readiness. Secondary focus: provides limited Tier 1/2 IT support to remain aligned with systems and user workflows.

Essential duties and Responsibilities include the following. Other duties may be assigned.

• Lead and maintain CMMC / NIST SP 800-171 compliance program
• Develop, analyze, and maintain:
• Security policies, procedures, and standards
• System Security Plan (SSP) and POA&M
• Identify compliance gaps and recommend remediation actions
• Maintain audit evidence and ensure controls are documented and verifiable
• Perform risk assessments and document findings
• Partner with IT and business units to align controls with operational realities
• Validate access control, endpoint security, and data handling practices
• Support incident tracking, documentation, and post-incident review
• Provide guidance on proper handling of sensitive data (including CUI, where applicable)

Supervisory Responsibilities

• Manages IT Department staff.

Qualifications And Education Requirements

• Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements.

Additional Experience Preferred

• Experience developing in Epicor utilizing TSQL.
• Experience creating reports in Crystal Reports and/or SSRS.
• Experience working in Incident and Problem management.
• Experience documenting Knowledge Base Articles and SOP’s.