Information Security and Compliance Specialist
D&S Manufacturing · Black River Falls, WI ·
- Employment
- Full time
- Category
- Security
- Experience
- 3+ years
D&S Manufacturing is looking to expand their Team in Black River Falls, WI.
Why join the team at D&S Manufacturing? We are 100% employee owned! D&S also pays 100% of your health insurance deductible, along with contributing 3% into your 401k automatically. We also have a competitive paid time off plan, along with 9 paid holidays. Plus, you will receive $1,000 hiring bonus along with 20.0 hours of PTO. D&S also has a quarterly incentive pay plan.
1st Shift/Full-Time: Hours are flexible
With experience, make up to $85,000/year.
Summary
Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management. Primary focus: governance, risk, compliance, and audit readiness. Secondary focus: provides limited Tier 1/2 IT support to remain aligned with systems and user workflows.
Essential duties and Responsibilities include the following. Other duties may be assigned.
- Lead and maintain CMMC / NIST SP 800-171 compliance program
- Develop, analyze, and maintain:
- Security policies, procedures, and standards
- System Security Plan (SSP) and POA&M
- Identify compliance gaps and recommend remediation actions
- Maintain audit evidence and ensure controls are documented and verifiable
- Perform risk assessments and document findings
- Partner with IT and business units to align controls with operational realities
- Validate access control, endpoint security, and data handling practices
- Support incident tracking, documentation, and post-incident review
- Provide guidance on proper handling of sensitive data (including CUI, where applicable)
Supervisory Responsibilities
- This position does not currently have supervisory responsibilities.
Qualifications and Education Requirements
- Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements.
Additional Experience Preferred
- Experience developing in Epicor utilizing TSQL.
- Experience creating reports in Crystal Reports and/or SSRS.
- Experience working in Incident and Problem management.
- Experience documenting Knowledge Base Articles and SOP’s.