Service Delivery Manager - Security & Governance

AFC Industries is a dynamic organization dedicated to providing supply chain management solutions for fasteners and assembly components to original equipment manufacturers, assembly plants, and other users of these products. We support a diverse industry base of manufacturers across a broad range of industries. Our experienced team has a proven track record of helping manufacturers and assemblers reduce cost, improve quality, and increase efficiency.

We are A Company Culture Devoted to Innovation & Improvement AFC provides localized expertise to customers in particular industries and geographies. We don't have a traditional hierarchical management structure where everyone simply "reports up." Instead, our company is made up of on-the-ground experts operating in an entrepreneurial fashion with the backing and support of an enterprise-grade organization.

Sharing cultural values breeds consistency and quality throughout our organization. Collectively, we are committed to a simple management approach, which influences our company culture and our management style. AFC Industries Reports to: Vice President of Information Technology Location: Remote Position Overview AFC Industries is seeking a Service Delivery Manager – Security & Governance to lead our cybersecurity & governance program across AFC Industries.

This service management role is responsible for cybersecurity operations and risk management while advancing AFC’s CMMC 2.0 and ISO/IEC 27001 initiatives. The successful candidate will combine technical knowledge with strong leadership and communication skills to turn security requirements into practical, sustainable business processes.

Key Responsibilities

Cybersecurity Lead AFC’s cybersecurity strategy and roadmap, strengthen security controls, and coordinate priorities across internal teams and external security providers. Oversee security investigations and incident response, including containment, recovery, evidence preservation, escalation, and post-incident improvements.

Oversee threat monitoring, vulnerability management, identity protection, endpoint security, and remediation efforts. Manage the performance and effectiveness of external cybersecurity providers. Lead employee security awareness efforts and report to leadership on cybersecurity posture, incidents, and remediation progress.

Governance Lead CMMC 2.0 readiness activities supporting Level 2 and applicable NIST SP 800-171 requirements, including CUI protection, assessments, documentation, and remediation. Lead the implementation and continual improvement of AFC’s ISO/IEC 27001 Information Security Management System, including audits and corrective actions.

Maintain the security risk register, assess third-party risks, and incorporate security requirements into projects, acquisitions, and emerging technologies. Develop, maintain, and oversee IT policies, standards, and procedures, ensuring clear ownership, regular reviews, and employee communication. Report to leadership on governance initiatives, compliance readiness, and outstanding risks.

Required Qualifications Five or more years of progressive experience in cybersecurity, information security, or IT governance, including program or team leadership. Experience overseeing security investigations, incident response, and external security providers. Working knowledge of CMMC 2.0, NIST SP 800-171, and Controlled Unclassified Information (CUI) protection.

Practical experience implementing or maintaining an ISO 27001 Information Security Management System. Understanding of cloud, network, endpoint, and identity security, including Microsoft 365 and Azure environments. Experience with risk assessments, audit preparation, control documentation, and remediation management.

Strong communication, organizational, and problem-solving skills, with the judgment to manage sensitive investigations and balance security with business needs. Bachelor’s degree in a related field or equivalent practical experience.

Preferred Qualifications

Experience supporting CMMC Level 2 assessments and ISO 27001 certification. Familiarity with Microsoft GCC High, DFARS cybersecurity requirements, and acquisition integrations. Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor. Experience in distribution, manufacturing, supply chain, or a geographically distributed organization Salary Target 150-164k Benefits: 401(k) 401(k) matching Dental insurance Flexible spending account Health insurance Life insurance Paid time off Vision insurance We are an AA/EEO/Veterans/Disabled employer.