J-114 Information Security & Compliance Manager

Information Security & Compliance IT Manager – FABCORP, Houston, TX. Reports to: Vice President of Operations. Full Time, Salary, Exempt. Overview Fabcorp seeks a compliance‑driven IT professional to oversee the information technology infrastructure and ensure alignment with NIST SP 800-171 and CMMC 2.0 Level 2 security requirements. Responsibilities include implementing technical controls, managing hardware/software stacks, and maintaining documentation for self‑attestation and C3PAO certification audits. Key Responsibilities Translate NIST SP 800-171/CMMC requirements into actionable daily IT operations and document evidence of compliance. Manage and secure the IT environment, ensuring restricted access, encryption (at rest and in transit), and proper identification/authentication controls. Lead gap assessments, remediate vulnerabilities, and maintain comprehensive System Security Plans (SSPs) and Plans of Action & Milestones (POA&Ms). Develop, manage, and test internal incident response plans, logging systems, and continuous monitoring processes. Maintain hardware and software inventories, oversee supply chain risk management, and ensure third‑party tools meet compliance flow‑downs. Deploy, configure, and manage hardware and software solutions, including: Identity & Access Management (IAM/MFA): Deploy MFA across all endpoints and VPNs; enforce strict principle of least privilege. Endpoint Protection & MDM: Use MDM software and Endpoint Detection and Response (EDR). Encryption Tools: Implement full‑disk encryption on all company laptops and secure data‑sharing software for Controlled Unclassified Information (CUI). SIEM & Log Management: Configure and monitor SIEM for auditing and accountability logs. Network Infrastructure: Manage Next‑Generation Firewalls (NGFW), intrusion detection systems (IDS), and secure network segmentation. Cloud Environments: Ensure FedRAMP‑compliant cloud services (e.g., GCC High) are correctly configured for secure CUI storage. Qualifications Practical Competencies Plan and implement additions, deletions, and modifications to the corporate data network. Implement network security systems. Oversee and maintain the company telephone and video systems. Manage corporate servers, firewalls, internet connectivity, switch gear, cabling, Wi‑Fi, and building connectivity. Interact with employees on all IT‑related issues and assist in training on IT devices. Procure and maintain communication devices, including wireless systems and international travel requirements. Disaster recovery planning and maintenance of critical systems. Manage software license procurement, installation, and lifecycle maintenance. Maintain cleanliness of work areas; follow company safety & security guidelines; attendance and punctuality essential. Other duties as needed. Desired Education and/or Experience Education: Advanced certificate training or Bachelor’s degree in Information Technology. Experience: 3‑5 years in IT infrastructure, network administration, or cybersecurity within the Defense Industrial Base (DIB). Other Qualifications Deep knowledge of NIST SP 800-171 R3 and CMMC 2.0 requirements. Preferred certifications: CompTIA Security+, CISSP, CMMC Certified Professional (CCP), CMMC Certified Assessor (CCA), Microsoft Certified System Engineer, Microsoft Exchange Server Engineer. Strong communication skills: Ability to write and maintain clear System Security Plans (SSPs) and explain technical risks to executive leadership. Physical Demands Employee may be required to climb into and out of equipment; reach in all directions; handle and manipulate objects; operate tools; lift up to 50 pounds; stand; sit; walk; push; pull; bend; kneel; crouch; crawl; see with or without correction; hear with or without correction. Work is approximately 60% sitting, 20% walking, 20% standing. Materials moved 5% of workday. Mental Demands Follow procedures and standards; apply basic math; plan work and select proper tools; read and interpret information; judge distances; follow oral and written directions; read, write; recognize and report safety hazards. Work Environment Noise level moderately loud. The position does not pose a direct threat to the health or safety of employees beyond reasonable accommodation. Equal Opportunity Employer FabCorp/Hammonds is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation or identity, veteran status, or disability. #J-18808-Ljbffr Fabcorp