Cybersecurity Risk and Compliance Manager

The Cybersecurity Risk and Compliance Manager is responsible for developing, implementing, and enforcing the organization's cybersecurity strategy while ensuring compliance with Department of Defense cybersecurity requirements. This is a hands-on role. This role will lead our Cybersecurity Maturity Model Certification (CMMC) program from assessment through certification and ongoing compliance, working closely with executive leadership, IT, operations, human resources, and external partners.

The ideal candidate combines strategic leadership with hands-on technical expertise and has experience supporting small to mid-sized organizations operating within the Defense Industrial Base.

Responsibilities

• Lead the organization's cybersecurity strategy, governance, and risk management program
• Manage all CMMC readiness, implementation, certification, and continuous compliance activities
• Develop and maintain policies, procedures, and security controls aligned with NIST SP 800-171, CMMC, and other applicable regulatory requirements
• Oversee protection of Controlled Unclassified Information (CUI) and other sensitive company information
• Conduct cybersecurity risk assessments and prioritize remediation efforts
• Coordinate internal and external security audits, assessments, and customer cybersecurity requirements
• Manage incident response planning, investigation, reporting, and recovery activities
• Monitor cybersecurity threats and implement appropriate defensive measures
• Collaborate with IT leadership to ensure secure network architecture, endpoint protection, identity management, and cloud security
• Manage relationships with Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), consultants, and third-party assessors
• Report cybersecurity risks, compliance status, and key performance metrics to executive leadership
• Develop security budgets and recommend technology investments that support business objectives

Requirements

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience)
• 3+ years of cybersecurity experience and/or experience in an information security role
• Demonstrated experience implementing NIST SP 800-171 security controls
• Experience leading CMMC preparation, assessments, or certification initiatives
• Strong knowledge of risk management frameworks and cybersecurity governance
• Experience developing security policies, standards, and procedures
• Excellent communication and leadership skills with the ability to work across all levels of the organization
• Applicant must be a U.S. Person
• Must be able and willing to obtain and maintain a U.S. security clearance if one is not currently held

Company Profile

Patriot Machine, Inc. is a technologically advanced aerospace manufacturer headquartered in St. Charles, Missouri. We supply complex structural parts and assemblies made from aluminum, titanium and steel to America’s largest aircraft manufacturers. Our culture of innovation and continuous improvement attracts skilled workers who are looking for a challenge. We offer opportunities to learn, grow and help shape the future of aerospace by applying innovative approaches to problem-solving.

Patriot Machine is a woman-owned business currently consisting of over 190 employees and 277,000 square feet of manufacturing and office space. We recently expanded into a new advanced manufacturing facility with ample space for further growth. We provide employees the opportunity to work alongside industry experts at an ultramodern manufacturing company.

Patriot Machine offers an excellent benefits package including health, dental, vision, life/disability, 401(k) with employer contributions, paid vacation and holidays.