Service Delivery Manager - Security & Governance

AFC Industries; United States; Remote; USD 150,000 - 164,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Flexible spending account

Health insurance

Life insurance

Paid time off

Vision insurance

Job summary

AFC Industries is seeking a Service Delivery Manager – Security & Governance to lead the cybersecurity and governance program. This remote role focuses on advancing CMMC 2.0 and ISO/IEC 27001 initiatives, balancing security requirements with business needs.

The ideal candidate will combine technical expertise with strong leadership and communication to implement sustainable security processes across AFC Industries.

Qualifications

• Five or more years in cybersecurity, information security, or IT governance with leadership.
• Experience with security investigations, incident response, and external providers.
• Familiarity with ISO 27001 and CMMC 2.0 readiness.

Responsibilities

• Lead cybersecurity strategy, roadmap, and security controls alignment.
• Oversee investigations, incident response, containment, and remediation.
• Manage threat monitoring, vulnerability management, and identity protection.
• Drive governance initiatives: CMMC 2.0 Level 2 readiness & ISO 27001 program.
• Communicate security posture and risk to leadership.

Skills

Cybersecurity leadership

Incident response

CMMC 2.0

ISO 27001

NIST SP 800-171

Cloud security

Communication

Education

Bachelor's degree

Tools

Microsoft 365

Azure

Job description

Service Delivery Manager - Security & Governance

#1084

Remote, United States

X Facebook LinkedIn Email Copy

Job Description

AFC Industries is a dynamic organization dedicated to providing supply chain management solutions for fasteners and assembly components to original equipment manufacturers, assembly plants, and other users of these products.

We support a diverse industry base of manufacturers across a broad range of industries. Our experienced team has a proven track record of helping manufacturers and assemblers reduce cost, improve quality, and increase efficiency.

We are A Company Culture Devoted to Innovation & Improvement

AFC provides localized expertise to customers in particular industries and geographies. We don't have a traditional hierarchical management structure where everyone simply "reports up." Instead, our company is made up of on-the-ground experts operating in an entrepreneurial fashion with the backing and support of an enterprise-grade organization.

Sharing cultural values breeds consistency and quality throughout our organization. Collectively, we are committed to a simple management approach, which influences our company culture and our management style.

AFC Industries
Reports to: Vice President of Information Technology
Location: Remote

Position Overview

AFC Industries is seeking a Service Delivery Manager – Security & Governance to lead our cybersecurity & governance program across AFC Industries.

This service management role is responsible for cybersecurity operations and risk management while advancing AFC’s CMMC 2.0 and ISO/IEC 27001 initiatives. The successful candidate will combine technical knowledge with strong leadership and communication skills to turn security requirements into practical, sustainable business processes.

Key Responsibilities

Cybersecurity

• Lead AFC’s cybersecurity strategy and roadmap, strengthen security controls, and coordinate priorities across internal teams and external security providers.
• Oversee security investigations and incident response, including containment, recovery, evidence preservation, escalation, and post-incident improvements.
• Oversee threat monitoring, vulnerability management, identity protection, endpoint security, and remediation efforts.
• Manage the performance and effectiveness of external cybersecurity providers.
• Lead employee security awareness efforts and report to leadership on cybersecurity posture, incidents, and remediation progress.

Governance

• Lead CMMC 2.0 readiness activities supporting Level 2 and applicable NIST SP 800-171 requirements, including CUI protection, assessments, documentation, and remediation.
• Lead the implementation and continual improvement of AFC’s ISO/IEC 27001 Information Security Management System, including audits and corrective actions.
• Maintain the security risk register, assess third-party risks, and incorporate security requirements into projects, acquisitions, and emerging technologies.
• Develop, maintain, and oversee IT policies, standards, and procedures, ensuring clear ownership, regular reviews, and employee communication.
• Report to leadership on governance initiatives, compliance readiness, and outstanding risks.

Required Qualifications

• Five or more years of progressive experience in cybersecurity, information security, or IT governance, including program or team leadership.
• Experience overseeing security investigations, incident response, and external security providers.
• Working knowledge of CMMC 2.0, NIST SP 800-171, and Controlled Unclassified Information (CUI) protection.
• Practical experience implementing or maintaining an ISO 27001 Information Security Management System.
• Understanding of cloud, network, endpoint, and identity security, including Microsoft 365 and Azure environments.
• Experience with risk assessments, audit preparation, control documentation, and remediation management.
• Strong communication, organizational, and problem-solving skills, with the judgment to manage sensitive investigations and balance security with business needs.
• Bachelor’s degree in a related field or equivalent practical experience.

Preferred Qualifications

• Experience supporting CMMC Level 2 assessments and ISO 27001 certification.
• Familiarity with Microsoft GCC High, DFARS cybersecurity requirements, and acquisition integrations.
• Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor.

Experience in distribution, manufacturing, supply chain, or a geographically distributed organization

Salary Target 150-164k

• 401(k)
• 401(k) matching
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

We are an AA/EEO/Veterans/Disabled employer.

Remote Capability

Work from home Eligible

undefined

Supply Chain Solutions

Products & Technical Data

News

IER_Right to Work

Employer Privacy Policy

AFC Industries endeavors to make reasonable accommodations for applicants with disabilities and disabled veterans pursuant to applicable federal and state law. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process or are limited in the ability or unable to access or use the online application process and need an alternative method for applying, please contact Human Resources by e-mail to [e-mail] with your specific accommodation request. AFC Industries is committed to creating a diverse environment and is proud to be an equal opportunity employer. Please see our equal employment opportunity (EEO) policy and Pay Transparency Statement located here [ EEO policy and Pay Transparency Statement ]. If you would like more information about your EEO rights under the law, please click here [ Know Your Rights poster ]

We are an AA/EEO/Veterans/Disabled employer.

EEO is the Law

ADP Privacy Statement Artificial Intelligence Google Privacy Policy Google Terms of Service