Head Of It Security & Compliance - Aerospace Industry

We are seeking a cybersecurity leader with expertise in CMMC, DFARS, and NIST SP 800-171, along with experience in the aerospace/defense industry, to drive enterprise security, compliance, and risk management initiatives.

Scroll down the page to see all associated job requirements, and any responsibilities successful candidates can expect.

What You’ll Do

As a key leader, you will own and drive the organization’s IT security and compliance program, ensuring the protection of sensitive systems and data while aligning with industry standards.

• Lead the development and execution of a robust IT security program across people, process, and technology
• Drive compliance initiatives for CMMC, NIST SP 800-171, and DFARS
• Oversee enterprise security audits (monthly/quarterly), especially across critical systems like ERP
• Build and manage a comprehensive risk management framework
• Establish and enforce security policies, standards, and procedures
• Lead security awareness programs to foster a strong security culture
• Manage vulnerability assessments, penetration testing, and remediation
• Develop and execute incident response strategies
• Evaluate and manage third-party/vendor security risks
• Provide regular updates to executive leadership on security posture and risk mitigation
• Stay ahead of evolving cybersecurity threats and regulatory changes

What We’re Looking For

• 10+ years of experience in IT Security & Compliance, with leadership experience
• Proven track record in building and scaling enterprise security programs
• Strong expertise in frameworks such as CMMC, NIST, DFARS, ISO 27001
• Hands-on xywuqvp experience with IT audits, especially ERP systems
• Deep understanding of risk management, incident response, and vulnerability management

Preferred Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field
• Industry certifications such as CISSP, CISM, GSEC, or Security+
• Experience in aerospace or defense environments
• Exposure to tools/technologies like SIEM, EDR/XDR, IDS/IPS, DLP
• Knowledge of databases (SQL, Oracle)