Information Security and Compliance Specialist

1st Shift/Full-Time: Hours are flexible

With experience, make up to $85,000/year.

Summary

Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management. Primary focus: governance, risk, compliance, and audit readiness. Secondary focus: provides limited Tier 1/2 IT support to remain aligned with systems and user workflows.

Essential duties and Responsibilities include the following. Other duties may be assigned.

• Lead and maintain CMMC / NIST SP 800-171 compliance program
• Develop, analyze, and maintain:
• Security policies, procedures, and standards
• System Security Plan (SSP) and POA&M
• Identify compliance gaps and recommend remediation actions
• Maintain audit evidence and ensure controls are documented and verifiable
• Perform risk assessments and document findings
• Partner with IT and business units to align controls with operational realities
• Validate access control, endpoint security, and data handling practices
• Support incident tracking, documentation, and post-incident review
• Provide guidance on proper handling of sensitive data (including CUI, where applicable)

• This position does not currently have supervisory responsibilities.

• Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements.

• Experience developing in Epicor utilizing TSQL.
• Experience creating reports in Crystal Reports and/or SSRS.
• Experience working in Incident and Problem management.
• Experience documenting Knowledge Base Articles and SOP’s.