Director of Cybersecurity

The Opportunity

The Director of Cybersecurity is responsible for leading the company's cybersecurity and information assurance strategy with a core focus on ensuring compliance with federal regulations and contractual requirements, including NIST SP 800-171, NIST SP 800-172, DFARS 252.204-7012, and CMMC. This role oversees enterprise security best practices, manages internal and external audits, and drives continuous improvement in the organization's security posture.

Key Responsibilities (Principal Duties and Accountabilities *Essential Functions)

Cybersecurity Compliance & Governance

• Develop and maintain policies and procedures to meet CMMC, NIST SP 800-171/172, ISO 27001, and other relevant standards.
• Act as the subject matter expert on cybersecurity compliance; serve as primary liaison to oversight agencies (DCSA, DCMA, etc.).
• Ensure compliance with DFARS clauses and manage flowdown requirements with Contracts and PMO.
• Maintain the System Security Plan (SSP), POA&M, and other audit readiness documentation.

Security Operations & Risk Management

• Oversee threat monitoring, incident response, vulnerability management, and security assessments.
• Perform regular risk assessments and gap analyses; manage remediation efforts.
• Lead internal audits and coordinate external third-party assessments.

Team Leadership & Collaboration

• Manage cybersecurity vendors and MSSPs; supervise staff as the team grows.
• Collaborate with IT, Industrial Security, Contracts, HR, and Program Finance Analysts.
• Provide executive briefings and regular updates on cybersecurity posture and compliance status.

Technology & Best Practices

• Promote secure configurations, asset management, data protection, and IAM.
• Evaluate and implement new cybersecurity technologies and automation tools.
• Ensure cloud and on-prem infrastructure meet compliance standards.