AFC IndustriesReports to: Vice President of Information Technology
Location: Remote
Position OverviewAFC Industries is seeking a Service Delivery Manager - Security & Governance to lead our cybersecurity & governance program across AFC Industries.
This service management role is responsible for cybersecurity operations and risk management while advancing AFC's CMMC 2.0 and ISO/IEC 27001 initiatives. The successful candidate will combine technical knowledge with strong leadership and communication skills to turn security requirements into practical, sustainable business processes.
Key ResponsibilitiesCybersecurity- Lead AFC's cybersecurity strategy and roadmap, strengthen security controls, and coordinate priorities across internal teams and external security providers.
- Oversee security investigations and incident response, including containment, recovery, evidence preservation, escalation, and post-incident improvements.
- Oversee threat monitoring, vulnerability management, identity protection, endpoint security, and remediation efforts.
- Manage the performance and effectiveness of external cybersecurity providers.
- Lead employee security awareness efforts and report to leadership on cybersecurity posture, incidents, and remediation progress.
Governance- Lead CMMC 2.0 readiness activities supporting Level 2 and applicable NIST SP 800-171 requirements, including CUI protection, assessments, documentation, and remediation.
- Lead the implementation and continual improvement of AFC's ISO/IEC 27001 Information Security Management System, including audits and corrective actions.
- Maintain the security risk register, assess third-party risks, and incorporate security requirements into projects, acquisitions, and emerging technologies.
- Develop, maintain, and oversee IT policies, standards, and procedures, ensuring clear ownership, regular reviews, and employee communication.
- Report to leadership on governance initiatives, compliance readiness, and outstanding risks.
Required Qualifications- Five or more years of progressive experience in cybersecurity, information security, or IT governance, including program or team leadership.
- Experience overseeing security investigations, incident response, and external security providers.
- Working knowledge of CMMC 2.0, NIST SP 800-171, and Controlled Unclassified Information (CUI) protection.
- Practical experience implementing or maintaining an ISO 27001 Information Security Management System.
- Understanding of cloud, network, endpoint, and identity security, including Microsoft 365 and Azure environments.
- Experience with risk assessments, audit preparation, control documentation, and remediation management.
- Strong communication, organizational, and problem-solving skills, with the judgment to manage sensitive investigations and balance security with business needs.
- Bachelor's degree in a related field or equivalent practical experience.
Preferred Qualifications- Experience supporting CMMC Level 2 assessments and ISO 27001 certification.
- Familiarity with Microsoft GCC High, DFARS cybersecurity requirements, and acquisition integrations.
- Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor.
Experience in distribution, manufacturing, supply chain, or a geographically distributed organization
Salary Target 150-164k
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Flexible spending account
- Health insurance
- Life insurance
- Paid time off
- Vision insurance
