[Hiring] Service Delivery Manager - Security & Governance @AFC Industries

Role Description

AFC Industries is seeking a Service Delivery Manager – Security & Governance to lead our cybersecurity & governance program across AFC Industries. This service management role is responsible for cybersecurity operations and risk management while advancing AFC’s CMMC 2.0 and ISO/IEC 27001 initiatives. The successful candidate will combine technical knowledge with strong leadership and communication skills to turn security requirements into practical, sustainable business processes.

Key Responsibilities

• Cybersecurity
  • Lead AFC’s cybersecurity strategy and roadmap, strengthen security controls, and coordinate priorities across internal teams and external security providers.
  • Oversee security investigations and incident response, including containment, recovery, evidence preservation, escalation, and post-incident improvements.
  • Oversee threat monitoring, vulnerability management, identity protection, endpoint security, and remediation efforts.
  • Manage the performance and effectiveness of external cybersecurity providers.
  • Lead employee security awareness efforts and report to leadership on cybersecurity posture, incidents, and remediation progress.
• Governance
  • Lead CMMC 2.0 readiness activities supporting Level 2 and applicable NIST SP 800-171 requirements, including CUI protection, assessments, documentation, and remediation.
  • Lead the implementation and continual improvement of AFC’s ISO/IEC 27001 Information Security Management System, including audits and corrective actions.
  • Maintain the security risk register, assess third-party risks, and incorporate security requirements into projects, acquisitions, and emerging technologies.
  • Develop, maintain, and oversee IT policies, standards, and procedures, ensuring clear ownership, regular reviews, and employee communication.
  • Report to leadership on governance initiatives, compliance readiness, and outstanding risks.

Qualifications

• Five or more years of progressive experience in cybersecurity, information security, or IT governance, including program or team leadership.
• Experience overseeing security investigations, incident response, and external security providers.
• Working knowledge of CMMC 2.0, NIST SP 800-171, and Controlled Unclassified Information (CUI) protection.
• Practical experience implementing or maintaining an ISO 27001 Information Security Management System.
• Understanding of cloud, network, endpoint, and identity security, including Microsoft 365 and Azure environments.
• Experience with risk assessments, audit preparation, control documentation, and remediation management.
• Strong communication, organizational, and problem-solving skills, with the judgment to manage sensitive investigations and balance security with business needs.
• Bachelor’s degree in a related field or equivalent practical experience.

Preferred Qualifications

• Experience supporting CMMC Level 2 assessments and ISO 27001 certification.
• Familiarity with Microsoft GCC High, DFARS cybersecurity requirements, and acquisition integrations.
• Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Experience in distribution, manufacturing, supply chain, or a geographically distributed organization.

Salary Target

150-164k

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

We are an AA/EEO/Veterans/Disabled employer.