Information Security and Compliance Specialist

D&S Manufacturing is looking to expand their Team in Black River Falls, WI. Why join the team at D&S Manufacturing? We are 100% employee owned! D&S also pays 100% of your health insurance deductible, along with contributing 3% into your 401k automatically. We also have a competitive paid time off plan, along with 9 paid holidays.

Plus, you will receive $1,000 hiring bonus along with 20.0 hours of PTO. D&S also has a quarterly incentive pay plan. 1st Shift/Full-Time: Hours are flexible With experience, make up to $85,000/year. Summary Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management.

Primary focus: governance, risk, compliance, and audit readiness. Secondary focus: provides limited Tier 1/2 IT support to remain aligned with systems and user workflows.

Essential duties and Responsibilities

include the following. Other duties may be assigned. Lead and maintain CMMC / NIST SP 800-171 compliance program Develop, analyze, and maintain: Security policies, procedures, and standards System Security Plan (SSP) and POA&M Identify compliance gaps and recommend remediation actions Maintain audit evidence and ensure controls are documented and verifiable Perform risk assessments and document findings Partner with IT and business units to align controls with operational realities Validate access control, endpoint security, and data handling practices Support incident tracking, documentation, and post-incident review Provide guidance on proper handling of sensitive data (including CUI, where applicable) Supervisory Responsibilities This position does not currently have supervisory responsibilities.

Qualifications

and Education Requirements Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements. Additional Experience Preferred Experience developing in Epicor utilizing TSQL. Experience creating reports in Crystal Reports and/or SSRS. Experience working in Incident and Problem management.

Experience documenting Knowledge Base Articles and SOP’s.