Information Security and Compliance Specialist
Technical Metal Specialties · New Berlin, WI ·
- Employment
- Full time
- Category
- Security
- Experience
- 3+ years
Technical Metal Specialties is looking to expand their team at New Berlin, WI. Why join the team at Technical Metal Specialties? We are 100% employee owned along with a climate-controlled building! Technical Metal Specialties automatically contributes 3% into your 401k. We also have a competitive paid time off plan, along with 10 paid holidays. Plus, you receive $1,000 hiring bonus and well as 20.0 hours of PTO when you start.
1st Shift/Full-Time: Hours are flexible
With experience, make up to $85,000/year.
Summary
Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management. Primary focus: governance, risk, compliance, and audit readiness. Secondary focus: provides limited Tier 1/2 IT support to remain aligned with systems and user workflows.
Essential duties and Responsibilities include the following. Other duties may be assigned.
- Lead and maintain CMMC / NIST SP 800-171 compliance program
- Develop, analyze, and maintain:
- Security policies, procedures, and standards
- System Security Plan (SSP) and POA&M
- Identify compliance gaps and recommend remediation actions
- Maintain audit evidence and ensure controls are documented and verifiable
- Perform risk assessments and document findings
- Partner with IT and business units to align controls with operational realities
- Validate access control, endpoint security, and data handling practices
- Support incident tracking, documentation, and post-incident review
- Provide guidance on proper handling of sensitive data (including CUI, where applicable)
Supervisory Responsibilities
- This position does not currently have supervisory responsibilities.
Qualifications and Education Requirements
- Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements.
Additional Experience Preferred
- Experience developing in Epicor utilizing TSQL.
- Experience creating reports in Crystal Reports and/or SSRS.
- Experience working in Incident and Problem management.
- Experience documenting Knowledge Base Articles and SOP’s.