Information Security and Compliance Specialist

D&S Manufacturing

  • Wisconsin
  • 30+ days ago

    Highlights

    Summary Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management. Qualifications and Education Requirements Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements.

    Numbers & Facts

    LocationWisconsin
    Websitehttp://www.dsmfg.com/careers/current-opportunities

    Description

    D&S Manufacturing is looking to expand their Team in Black River Falls, WI.
     
    Why join the team at D&S Manufacturing? We are 100% employee owned! D&S also pays 100% of your health insurance deductible, along with contributing 3% into your 401k automatically. We also have a competitive paid time off plan, along with 9 paid holidays. Plus, you will receive $1,000 hiring bonus along with 20.0 hours of PTO. D&S also has a quarterly incentive pay plan.
     
    1st Shift/Full-Time: Hours are flexible 
     
    With experience, make up to $85,000/year. 
     
    Summary
    Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management.  Primary focus: governance, risk, compliance, and audit readiness.   Secondary focus: provides limited Tier 1/2 IT support to remain aligned with systems and user workflows.
       
    Essential duties and Responsibilities include the following.  Other duties may be assigned.
    • Lead and maintain CMMC / NIST SP 800-171 compliance program
    • Develop, analyze, and maintain:
      • Security policies, procedures, and standards
      • System Security Plan (SSP) and POA&M
    • Identify compliance gaps and recommend remediation actions
    • Maintain audit evidence and ensure controls are documented and verifiable
    • Perform risk assessments and document findings
    • Partner with IT and business units to align controls with operational realities
    • Validate access control, endpoint security, and data handling practices
    • Support incident tracking, documentation, and post-incident review
    • Provide guidance on proper handling of sensitive data (including CUI, where applicable)
    Supervisory Responsibilities
    • This position does not currently have supervisory responsibilities. 
    Qualifications and Education Requirements
    • Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements.
    Additional Experience Preferred
    • Experience developing in Epicor utilizing TSQL.
    • Experience creating reports in Crystal Reports and/or SSRS.
    • Experience working in Incident and Problem management.
    • Experience documenting Knowledge Base Articles and SOP’s.

    Similar Jobs