Job Description

AFC Industries is a dynamic organization dedicated to providing supply chain management solutions for fasteners and assembly components to original equipment manufacturers, assembly plants, and other users of these products.

We support a diverse industry base of manufacturers across a broad range of industries. Our experienced team has a proven track record of helping manufacturers and assemblers reduce cost, improve quality, and increase efficiency.

We are A Company Culture Devoted to Innovation & Improvement

AFC provides localized expertise to customers in particular industries and geographies. We don't have a traditional hierarchical management structure where everyone simply "reports up." Instead, our company is made up of on-the-ground experts operating in an entrepreneurial fashion with the backing and support of an enterprise-grade organization.

Sharing cultural values breeds consistency and quality throughout our organization. Collectively, we are committed to a simple management approach, which influences our company culture and our management style.

AFC Industries

Reports to: Vice President of Information Technology

Location: Remote

Position Overview

AFC Industries is seeking a Service Delivery Manager – Security & Governance to lead our cybersecurity & governance program across AFC Industries.

This service management role is responsible for cybersecurity operations and risk management while advancing AFC’s CMMC 2.0 and ISO/IEC 27001 initiatives. The successful candidate will combine technical knowledge with strong leadership and communication skills to turn security requirements into practical, sustainable business processes.

Key Responsibilities

Cybersecurity

• Lead AFC’s cybersecurity strategy and roadmap, strengthen security controls, and coordinate priorities across internal teams and external security providers.
• Oversee security investigations and incident response, including containment, recovery, evidence preservation, escalation, and post-incident improvements.
• Oversee threat monitoring, vulnerability management, identity protection, endpoint security, and remediation efforts.
• Manage the performance and effectiveness of external cybersecurity providers.
• Lead employee security awareness efforts and report to leadership on cybersecurity posture, incidents, and remediation progress.

Governance

• Lead CMMC 2.0 readiness activities supporting Level 2 and applicable NIST SP 800-171 requirements, including CUI protection, assessments, documentation, and remediation.
• Lead the implementation and continual improvement of AFC’s ISO/IEC 27001 Information Security Management System, including audits and corrective actions.
• Maintain the security risk register, assess third-party risks, and incorporate security requirements into projects, acquisitions, and emerging technologies.
• Develop, maintain, and oversee IT policies, standards, and procedures, ensuring clear ownership, regular reviews, and employee communication.
• Report to leadership on governance initiatives, compliance readiness, and outstanding risks.

Required Qualifications

• Five or more years of progressive experience in cybersecurity, information security, or IT governance, including program or team leadership.
• Experience overseeing security investigations, incident response, and external security providers.
• Working knowledge of CMMC 2.0, NIST SP 800-171, and Controlled Unclassified Information (CUI) protection.
• Practical experience implementing or maintaining an ISO 27001 Information Security Management System.
• Understanding of cloud, network, endpoint, and identity security, including Microsoft 365 and Azure environments.
• Experience with risk assessments, audit preparation, control documentation, and remediation management.
• Strong communication, organizational, and problem-solving skills, with the judgment to manage sensitive investigations and balance security with business needs.
• Bachelor’s degree in a related field or equivalent practical experience.

Preferred Qualifications

• Experience supporting CMMC Level 2 assessments and ISO 27001 certification.
• Familiarity with Microsoft GCC High, DFARS cybersecurity requirements, and acquisition integrations.
• Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor.

Experience in distribution, manufacturing, supply chain, or a geographically distributed organization

Salary Target 150-164k

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

We are an AA/EEO/Veterans/Disabled employer.