Service Delivery Manager - Security & Governance

AFC Industries•Remote,

1d•$150,000 - $164,000•Remote

About The Position

AFC Industries is seeking a Service Delivery Manager – Security & Governance to lead the company’s cybersecurity and governance program. This service management role is responsible for cybersecurity operations and risk management while advancing AFC’s CMMC 2.0 and ISO/IEC 27001 initiatives. The successful candidate will combine technical knowledge with leadership and communication skills to turn security requirements into practical, sustainable business processes. The position is remote and reports to the Vice President of Information Technology.

Requirements

Five or more years of progressive experience in cybersecurity, information security, or IT governance, including program or team leadership.
Experience overseeing security investigations, incident response, and external security providers.
Working knowledge of CMMC 2.0, NIST SP 800-171, and Controlled Unclassified Information (CUI) protection.
Practical experience implementing or maintaining an ISO 27001 Information Security Management System.
Understanding of cloud, network, endpoint, and identity security, including Microsoft 365 and Azure environments.
Experience with risk assessments, audit preparation, control documentation, and remediation management.
Strong communication, organizational, and problem-solving skills, with the judgment to manage sensitive investigations and balance security with business needs.
Bachelor’s degree in a related field or equivalent practical experience.

Nice To Haves

Experience supporting CMMC Level 2 assessments and ISO 27001 certification.
Familiarity with Microsoft GCC High, DFARS cybersecurity requirements, and acquisition integrations.
Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor.
Experience in distribution, manufacturing, supply chain, or a geographically distributed organization.

Responsibilities

Lead AFC’s cybersecurity strategy and roadmap, strengthen security controls, and coordinate priorities across internal teams and external security providers.
Oversee security investigations and incident response, including containment, recovery, evidence preservation, escalation, and post-incident improvements.
Oversee threat monitoring, vulnerability management, identity protection, endpoint security, and remediation efforts.
Manage the performance and effectiveness of external cybersecurity providers.
Lead employee security awareness efforts and report to leadership on cybersecurity posture, incidents, and remediation progress.
Lead CMMC 2.0 readiness activities supporting Level 2 and applicable NIST SP 800-171 requirements, including CUI protection, assessments, documentation, and remediation.
Lead implementation and continual improvement of AFC’s ISO/IEC 27001 Information Security Management System, including audits and corrective actions.
Maintain the security risk register, assess third-party risks, and incorporate security requirements into projects, acquisitions, and emerging technologies.
Develop, maintain, and oversee IT policies, standards, and procedures, ensuring clear ownership, regular reviews, and employee communication.
Report to leadership on governance initiatives, compliance readiness, and outstanding risks.