AFC Industries is a dynamic organization dedicated to providing supply chain
management solutions for fasteners and assembly components to original equipment
manufacturers, assembly plants, and other users of these products.
We support a diverse industry base of manufacturers across a broad range of
industries. Our experienced team has a proven track record of helping
manufacturers and assemblers reduce cost, improve quality, and increase
efficiency.
We are A Company Culture Devoted to Innovation & Improvement
AFC provides localized expertise to customers in particular industries and
geographies. We don't have a traditional hierarchical management structure where
everyone simply "reports up." Instead, our company is made up of on-the-ground
experts operating in an entrepreneurial fashion with the backing and support of
an enterprise-grade organization.
Sharing cultural values breeds consistency and quality throughout our
organization. Collectively, we are committed to a simple management approach,
which influences our company culture and our management style.
AFC Industries
Reports to: Vice President of Information Technology
Location: Remote
POSITION OVERVIEW
AFC Industries is seeking a Service Delivery Manager – Security & Governance to
lead our cybersecurity & governance program across AFC Industries.
This service management role is responsible for cybersecurity operations and
risk management while advancing AFC’s CMMC 2.0 and ISO/IEC 27001 initiatives.
The successful candidate will combine technical knowledge with strong leadership
and communication skills to turn security requirements into practical,
sustainable business processes.
KEY RESPONSIBILITIES
CYBERSECURITY
Lead AFC’s cybersecurity strategy and roadmap, strengthen security controls,
and coordinate priorities across internal teams and external security
providers.
Oversee security investigations and incident response, including containment,
recovery, evidence preservation, escalation, and post-incident improvements.
Oversee threat monitoring, vulnerability management, identity protection,
endpoint security, and remediation efforts.
Manage the performance and effectiveness of external cybersecurity providers.
Lead employee security awareness efforts and report to leadership on
cybersecurity posture, incidents, and remediation progress.
GOVERNANCE
Lead CMMC 2.0 readiness activities supporting Level 2 and applicable NIST SP
800-171 requirements, including CUI protection, assessments, documentation,
and remediation.
Lead the implementation and continual improvement of AFC’s ISO/IEC 27001
Information Security Management System, including audits and corrective
actions.
Maintain the security risk register, assess third-party risks, and
incorporate security requirements into projects, acquisitions, and emerging
technologies.
Develop, maintain, and oversee IT policies, standards, and procedures,
ensuring clear ownership, regular reviews, and employee communication.
Report to leadership on governance initiatives, compliance readiness, and
outstanding risks.
REQUIRED QUALIFICATIONS
Five or more years of progressive experience in cybersecurity, information
security, or IT governance, including program or team leadership.
Experience overseeing security investigations, incident response, and
external security providers.
Working knowledge of CMMC 2.0, NIST SP 800-171, and Controlled Unclassified
Information (CUI) protection.
Practical experience implementing or maintaining an ISO 27001 Information
Security Management System.
Understanding of cloud, network, endpoint, and identity security, including
Microsoft 365 and Azure environments.
Experience with risk assessments, audit preparation, control documentation,
and remediation management.
Strong communication, organizational, and problem-solving skills, with the
judgment to manage sensitive investigations and balance security with
business needs.
Bachelor’s degree in a related field or equivalent practical experience.
PREFERRED QUALIFICATIONS
Experience supporting CMMC Level 2 assessments and ISO 27001 certification.
Familiarity with Microsoft GCC High, DFARS cybersecurity requirements, and
acquisition integrations.
Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead
Implementer/Auditor.
Experience in distribution, manufacturing, supply chain, or a geographically
distributed organization
Salary Target 150-164k
Benefits:
401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Life insurance
Paid time off
Vision insurance
We are an AA/EEO/Veterans/Disabled employer.