Information Security Program Lead (CMMC/NIST)

Envision Technology, LLC.; Manchester (NH); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Envision Technology, LLC. seeks an Information Security Manager to lead the evolution of the company’s cybersecurity posture across systems, networks, and data, ensuring regulatory compliance and proactive threat mitigation.

The role focuses on implementing security controls, incident response, and continuous improvement of the SSP, with responsibilities spanning ITAR and export compliance requirements.

Qualifications

• Bachelor’s degree in Information Security, Information Systems, Computer Science, Business Administration, Management, Finance, or equivalent with 5+ years of experience.
• Experience with regulatory compliance requirements such as CMMC 2.0, NIST 800-171r2/3, ITAR, DFARS and similar.
• Expertise with Microsoft 365 GCC High, SIEM systems, and security infrastructure.
• Experience configuring network switches, firewalls, and Wi‑Fi equipment.
• Excellent organizational and documentation skills.

Responsibilities

• Administer network and data security including MS365 GCC-High, Active Directory, Intune, Group Policy, firewalls, endpoint and email security.
• Develop and enforce security controls per CMMC, NIST 800-171r2/3, ITAR, DFARS and related standards.
• Provide detailed security reports with data analysis, mitigations and risk escalation as needed.
• Manage the System Security Plan (SSP) and its ongoing improvements.
• Perform additional security tasks to meet organizational needs.

Skills

Regulatory compliance

Incident response

Documentation

Organizational skills

Project management

Education

Bachelor's degree in Information Security/CS/IT

Tools

Microsoft 365 GCC High

SIEM systems

Active Directory

Firewalls

Job description

Envision Technology, LLC. seeks an Information Security Manager to lead the evolution of the company’s cybersecurity posture across systems, networks, and data, ensuring regulatory compliance and proactive threat mitigation.

The role focuses on implementing security controls, incident response, and continuous improvement of the SSP, with responsibilities spanning ITAR and export compliance requirements.