On-Site Information Security Manager

The ideal candidate will meet the following criteria: Requirements: Hands-on CMMC Level 2 / NIST 800-171 compliance experience, including implementing security controls, managing SSPs/POA&Ms, preparing for audits, and supporting CMMC programs. Work directly with IT leadership to communicate program status, recommend technical solutions, coordinate compliance efforts, and help develop a dedicated security team supporting commercial and government operations.

Summit Human Capital is seeking a highly motivated Information Security Manager to support our client in the Greater Norfolk Region in the shipbuilding and maritime industry. This position has the exciting opportunity to lead and maintain cybersecurity and compliance programs, with a primary focus on completing and certifying the CMMC Level 2 program and maintaining a secure Microsoft-based environment. The ideal candidate will meet the following criteria:
Requirements:

• Hands-on CMMC Level 2 / NIST 800-171 compliance experience, including implementing security controls, managing SSPs/POA&Ms, preparing for audits, and supporting CMMC programs
• Practical experience with Microsoft cloud security, identity/authentication, access controls, and the ability to implement, troubleshoot, and maintain technical security controls
• 5+ years of relevant professional experience managing technical security initiatives, independently driving remediation, assessing risk, and coordinating with IT leadership
• US citizenship or Green Card status

Desired:

• Experience with Microsoft GCC High, Microsoft Sentinel, Defender, Entra ID, Intune, and related Microsoft enterprise security technologies
• Previous DoD contracting/CUI experience, CMMC assessment involvement, CISSP/CISM/Security+ certifications, or experience leading technical security teams
• Bachelor's degree preferred

Responsibilities:

• Take ownership of the existing CMMC Level 2 compliance program, complete remaining controls and documentation, manage remediation, and lead preparation for third-party certification
• Implement, administer, monitor, and troubleshoot cybersecurity controls across the Microsoft cloud environment, including identity management, endpoint security, incident response, and security configurations
• Work directly with IT leadership to communicate program status, recommend technical solutions, coordinate compliance efforts, and help develop a dedicated security team supporting commercial and government operations

The hourly pay range for this position is $55 $63, depending on experience, skills, and qualifications.
Benefits: We offer a comprehensive benefits package, which includes medical, dental, and vision insurance; 401(k)/retirement plan; and other benefits in accordance with applicable laws