Information Security Manager

Summit Human Capital is seeking a highly motivated Information Security Manager to support our client in the Greater Norfolk Region in the shipbuilding and maritime industry. This position has the exciting opportunity to lead and maintain cybersecurity and compliance programs, with a primary focus on completing and certifying the CMMC Level 2 program and maintaining a secure Microsoft-based environment. The ideal candidate will meet the following criteria:

Requirements:
Hands-on CMMC Level 2 / NIST 800-171 compliance experience, including implementing security controls, managing SSPs/POA&Ms, preparing for audits, and supporting CMMC programs
Practical experience with Microsoft cloud security, identity/authentication, access controls, and the ability to implement, troubleshoot, and maintain technical security controls
5+ years of relevant professional experience managing technical security initiatives, independently driving remediation, assessing risk, and coordinating with IT leadership
US citizenship or Green Card status

Desired:
Experience with Microsoft GCC High, Microsoft Sentinel, Defender, Entra ID, Intune, and related Microsoft enterprise security technologies
Previous DoD contracting/CUI experience, CMMC assessment involvement, CISSP/CISM/Security+ certifications, or experience leading technical security teams
Bachelor's degree preferred

Responsibilities:
Take ownership of the existing CMMC Level 2 compliance program, complete remaining controls and documentation, manage remediation, and lead preparation for third-party certification
Implement, administer, monitor, and troubleshoot cybersecurity controls across the Microsoft cloud environment, including identity management, endpoint security, incident response, and security configurations
Work directly with IT leadership to communicate program status, recommend technical solutions, coordinate compliance efforts, and help develop a dedicated security team supporting commercial and government operations