Senior Information Security & 365 Compliance Lead

Colonna's Shipyard; Norfolk (VA); On-site; USD 97,000 - 126,000; Full time

Benefits offered by this job

Medical/dental/vision benefits

401k with match

Paid holidays

Job summary

Colonna’s Shipyard in Norfolk, VA is seeking an Information Security Manager to lead cybersecurity, compliance, and Microsoft 365 programs onsite. You’ll protect CUI, manage audits, and drive risk reduction while supporting production operations.

The role requires five+ years in security, strong leadership, and the ability to translate risk into business guidance. Occasional travel and a flexible schedule may be needed.

Qualifications

• Bachelor's degree in cybersecurity, IT, information systems, computer science, or related field.
• Five+ years in information security, cybersecurity, compliance, or related tech role.
• Experience with NIST SP 800-171, CMMC, CIS Controls, or similar standards.
• Hands-on with Microsoft 365 and cloud security tech.

Responsibilities

• Lead information security and cybersecurity programs across the organization.
• Develop, implement, and maintain security policies, standards, and controls.
• Manage compliance with CMMC, NIST SP 800-171, DFARS, FAR, and customer requirements.
• Oversee risk assessments, POA&Ms, and continuous improvement.
• Coordinate internal and external cybersecurity audits and evidence collection.
• Oversee incident response planning, exercises, investigations, and reporting.
• Monitor threats and governance, and mentor IT staff on security practices.

Skills

Cybersecurity leadership

Information security

Policy development

Risk assessment

Audits & compliance

Microsoft 365 admin

Project management

Incident response

Vendor risk

Communication skills

Education

Bachelor's degree in cybersecurity

Equivalent education/experience

Tools

Microsoft Defender

Intune

Entra ID

Azure AD

Job description

Colonna’s Shipyard in Norfolk, VA is seeking an Information Security Manager to lead cybersecurity, compliance, and Microsoft 365 programs onsite. You’ll protect CUI, manage audits, and drive risk reduction while supporting production operations.

The role requires five+ years in security, strong leadership, and the ability to translate risk into business guidance. Occasional travel and a flexible schedule may be needed.