Manufacturing Compliance & CMMC/CPCSP Manager

Thyssenkrupp; Southfield (MI); Hybrid; USD 85,000 - 120,000; Full time

Job summary

thyssenkrupp Materials Services is seeking a Manager of Manufacturing Compliance & Cybersecurity Maturity Model Certification (CMMC) / CPCSC for US and Canada. This role develops and sustains regulatory compliance programs across Manufacturing, Distribution, and Value Add operations.

It acts as the operational compliance SME, translating complex requirements into practical processes, training, and day-to-day practices, while coordinating audits and readiness activities with cross-functional

Qualifications

• Experience developing and managing enterprise compliance programs across manufacturing and distribution.
• Ability to translate regulatory requirements into practical processes and procedures.
• Strong collaboration with IT, facilities, operations, and quality teams.

Responsibilities

• Lead development and continuous improvement of enterprise compliance programs across sites.
• Translate regulatory requirements into actionable business processes and procedures.
• Coordinate certification readiness activities for US and Canadian facilities.
• Develop and monitor implementation roadmaps for compliant operations.
• Partner with IT on cybersecurity controls and operational implementation.

Job description

With around 480 locations in over 40 countries, thyssenkrupp Materials Services is the biggest materials distributor and service provider in the western world. The broad service spectrum offered by the materials experts enables customers to focus on their individual core business. The area of Materials Services spans two strategic areas: global materials distribution as one-stop-shop – from steel and stainless steel, tubes and pipes, nonferrous metals and specialty materials to plastics and raw materials – and tailored services in the areas of materials management and supply chain management. An extensive omnichannel architecture offers 250,000 customers worldwide cross-channel, round-the-clock access to more than 150,000 products and services. A highly efficient logistics system ensures that all requested services are smoothly integrated into customer production processes “just-in-time” or “just-in-sequence.Copper and Brass DivisonSales is a distributor and processor of aluminum, stainless steel, copper, brass, bronze and more quality materials serving markets across North America, including Canada and Mexico. By providing customers with what they want, when they need it, Copper and Brass Sales is able to help them succeed in today’s challenging global business environment. The company’s focus on the Aerospace, Automotive, Electrical, Medical and Oil & Gas Industries allows them to offer these market segments expertise specific to their needs. The daily commitment of its employees to provide premium service focused on the customer first has earned Copper and Brass Sales the position of a respected leader in the nonferrous metals industry for over 80 years.

Job Summary

The Manager of Manufacturing Compliance & Cybersecurity Maturity Model Certification (CMMC) / Canadian Program for Cyber Security Certification CPCSC) is responsible for developing, implementing, and sustaining regulatory compliance programs across Manufacturing, Distribution, and Value Add operations throughout the United States and Canada.

This role serves as the organization's operational compliance subject matter expert, translating complex regulatory requirements into practical business processes, standard work, training, and day-to-day operational practices. The position bridges the gap between regulatory language and business execution by ensuring compliance requirements are understood, implemented, and consistently followed throughout the organization.

Working cross-functionally with Operations, Engineering, Facilities, Human Resources, Trade Compliance, Information Technology, and Quality, this individual develops compliance programs, prepares facilities for certification and customer audits, conducts internal compliance audits, and drives continuous compliance readiness.

This role focuses on operational compliance and implementation rather than technical cybersecurity infrastructure or Quality Management System ownership.

Job Description

Key Accountabilities:

Compliance Program Management

• Lead the development, implementation, and continuous improvement of enterprise compliance programs.

• Translate complex regulatory requirements into practical business processes and operational procedures.

• Develop implementation roadmaps and ensure consistent deployment across all manufacturing, distribution, and value-added facilities.

• Serve as the primary business resource for interpreting compliance requirements and their application to daily operations.

• Monitor changes to applicable regulations and implement required business process updates.

CMMC / CPCSP Program Management

• Lead operational implementation and sustainment of the organization's CMMC/CPCSP compliance program.

• Coordinate certification readiness activities for U.S. and Canadian facilities.

• Prepare sites for C3PAO assessments and customer audits.

• Develop implementation plans and monitor overall compliance readiness.

• Partner with Information Technology on technical cybersecurity controls while owning the operational and facility-level implementation.

• Track certification milestones and ensure ongoing compliance.

ITAR / CPG / EAR Operational Compliance

• Develop and implement operational processes supporting compliance with:

• ITAR (International Traffic in Arms Regulations)

• CPG (Controlled Products/Compliance Program Governance, as applicable)

• EAR (Export Administration Regulations)

• Controlled Unclassified Information (CUI) handling requirements

• Ensure employees understand and properly apply export control and controlled information requirements.

• Develop business procedures supporting secure handling of regulated information throughout manufacturing operations.

Physical Security Controls

• Develop and maintain operational standards for:

Facility access controls:

• Physical protection of Controlled Unclassified Information

• Physical document security

Visitor management:

• Media protection and secure storage

• Employee handling of regulated information

Restricted production areas:

• Document retention and destruction

• Facility compliance walkthroughs and operational assessments

Compliance Internal Audit Program

• Develop and manage the enterprise compliance audit program.

• Conduct internal audits supporting CMMC/CPCSP, ITAR, EAR, and other regulatory requirements.

• Track audit findings through corrective action and verification of effectiveness.

• Coordinate certification readiness assessments.

• Develop audit schedules and compliance metrics.

• Support external regulatory and customer audits.

ISO 9001 / AS9100 Internal Audit Support

• Partner with the Quality organization to support ISO 9001 and AS9100 internal audit activities.

• Provide regulatory compliance expertise during integrated audits.

• Assist in identifying opportunities to align compliance requirements with existing operational processes.

• Support audit preparation and corrective action activities related to regulatory compliance.

Compliance Training & Organizational Readiness

• Develop and deliver compliance training programs for employees, supervisors,