What are the responsibilities and job description for the REGULATORY & COMPLIANCE MANAGER with Security Clearance position at Aero Simulation, Inc.?
THE COMPANY For over 40 years, Aero Simulation, Inc. (ASI) has provided quality flight training devices to the US Military. ASI has successfully built numerous training systems with a primary focus on aircrew and maintenance training systems. Our current programs include, but are not limited to, the B-1 Training Systems (Air Force), E-2D Training Systems (Navy), CH-53E Training Devices (USMC), IMOMS (Coast Guard), Navigation, Seamanship, Shiphandling Trainer - NSST (Navy). To learn more about ASI visit Programs - Aero Simulation, Inc. ASI is a 100% employee-owned engineering and manufacturing company committed to supporting the nation's warfighters. Being 100% employee-owned directly impacts our culture: it drives our decision-making, motivates our teams, increases our productivity, improves retention and contributes to the future success of our company. Our culture is one where we work hard for our clients and for each other - and we have fun collaborating, sharing experience and expertise, and learning along the way. We strive to deliver exceptional quality, elevate client relationships, and enrich the careers and lives of our employee-owners. As Employee-Owners, we are invested in the success and continued development of each other and the company. In addition to the Employee Stock Ownership Plan (ESOP), we offer a flexible work environment, generous paid time off, professional development opportunities, industry competitive compensation, and superior benefits to include medical, dental, 401k and more! ASI is a great place to build a career and grow with a company that is dedicated to quality, service and to fostering a community of support for each and every member of the team. To learn more about this opportunity, keep reading! POSITION SUMMARY The Regulatory & Compliance Manager (Defense Programs) is responsible for interpreting and operationalizing U.S. defense-related regulatory requirements including, but not limited to ITAR, EAR, CMMC, DFARS cybersecurity clauses, and related DoD information-protection requirements. This role leads the development implementation, and ongoing governance of company-wide policies, procedures, training programs, and assessment activities to ensure proper governance, classification, protection, and exportability determinations for Controlled Unclassified Information (CUI), Controlled Technical Information (CTI), and ITAR/EAR-controlled data. This position serves as the primary compliance authority supporting program execution, audits, pre-contract reviews, and routine departmental operations to mitigate regulatory, contractual and security risk. This is not a technical role, however a general understanding of the tools and technologies used to implement technical security controls is preferred. ESSENTIAL DUTIES AND RESPONSIBILITIES Regulatory Interpretation and Program Development * Serve as the company's subject matter expert on ITAR, EAR, CMMC, DFARS cybersecurity clauses, and DoD-specific controlled information categories.
- Develop and maintain corporate policies, operating procedures, standards, and guidance related to data protection, export controls, and information governance.
- Maintain a regulatory intelligence function tracking changes to relevant U.S. government requirements, industry trends, and enforcement actions as well as assessing potential impact to company operations and programs. * Controlled Information Governance
- Lead classification and marking reviews for CUI, CTI, ITAR/EAR technical data, and company proprietary information.
- Establish and administer processes for data handling, storage, transmission, and access authorization consistent with government and corporate requirements.
- Work with engineering, program management, quality, operations, and HR to embed classification controls into daily workflows and business processes. Training and Awareness * Develop annual and role-based training programs for CUI, export controls, cybersecurity compliance, and sensitive data handling.
- Deliver instructor-led training as needed to maintain training records to support audit readiness and compliance verification. * Assessments, Monitoring, and Oversight
- Support internal readiness assessments for CMMC and NIST 800-171.
- Participate in program reviews, contract kickoff meetings, and export-related technical reviews to identify and address compliance risks early. * Conduct periodic audits of data storage locations, document repositories, and file-sharing platforms to ensure compliance with information handling requirements. Export Controls (ITAR/EAR) * Provide guidance on jurisdiction and classification (USML/ECCN) for technical data and defense articles.
- Coordinate with legal counsel on export license requirements and technology control plans (TCPs).
- Enforce access restrictions and ensure adequate technical safeguards for export-controlled information.
- Cross-Functional Collaboration
- Partner with HR, IT, Security, Engineering, Operations, and Program Management to integrate compliance requirements within business processes.
- Serve as point of contact during audits, inspections, and external assessments.
- Support incident response involving potential mishandling of controlled information. SUPERVISORY RESPONSIBILITES This role may provide functional guidance, training, and compliance direction to employees across the organization without direct supervisory authority. Requirements EXPERIENCE REQUIREMENTS * 5-10 years of experience in defense-sector compliance, cybersecurity, export controls, or related governance roles.
- Strong understanding of ITAR, EAR, CMMC 2.0, NIST 800-171, and DFARS 7012/7019/7020/7021.
- Experience creating policies, procedures, and training content.
- Demonstrated ability to perform controlled-information classification and export-control evaluations. PREFERRED QUALIFICATIONS * Experience supporting DoD contracts as part of a DIB contractor.
- Familiarity with ISO 9001/AS9100, quality systems, and configuration management.
- Compliance-centric certifications such as CMMC Certified Professional (CCP), Certified Compliance & Ethics Professional (CCEP), Certified Information Privacy Professional (CIPP/US), or similar.
- Existing security clearance or clearance eligibility. ADDITIONAL REQUIRED KNOWLEDGE, SKILLS AND ABILITIES * Strong written and verbal communication skills, with the ability to clearly convey quality requirements, findings, and corrective actions to technical and non-technical audiences.
- Highly organized and detail-oriented, with the ability to manage multiple priorities while maintaining accuracy and compliance.
- Self-directed with the ability to work independently, while also collaborating effectively across departments and organizational levels.
- Demonstrated ability to build and maintain productive working relationships with internal stakeholders.
- Strong analytical, critical-thinking, and problem-solving skills, including the ability to assess systems and processes, identify gaps or risks, and implement effective solutions.
- Ability to perform effectively in a fast-paced, deadline-driven environment and manage competing demands with professionalism.
- Ability to handle pressure and ambiguity while maintaining focus, sound judgment, and adherence to quality standards. EDUCATION REQUIREMENTS Bachelor's degree in business, cybersecurity, information systems, or related field. EMPLOYMENT REQUIREMENTS U.S. Citizenship Required: As a federal contractor supporting the U.S. warfighter, it is required that all employees in this role be United States citizens in compliance with government contract and security requirements. Background Check: Must be able to successfully pass an initial background screening. Security Clearance: Must be able to obtain and maintain an active Department of Defense (DoD) security clearance. The selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information, as required by the position. Work Schedule Flexibility: Occasional overtime and alternate shifts may be required to meet customer schedules, critical deadlines, or program milestones. Travel Requirements: Must be able and willing to travel domestically and, on occasion, internationally to customer sites, partner locations, or project meetings in support of contract objectives. Drug-Free Workplace: ASI maintains a Drug-Free Workplace. Applicants and employees are subject to pre-employment and random drug testing in accordance with company policy. Employment Contingency: All employment offers are contingent upon the successful completion of all background checks, security clearance requirements, and drug-screening results. PHYSICAL REQUIREMENTS * Ability to sit, stand, and walk for extended periods of time in an office and manufacturing environment.
- Ability to use hands and fingers to handle, feel, and operate tools, equipment, and computer peripherals.
- Ability to communicate effectively in person, over the phone, and in writing.
- Visual acuity required to perform inspections, read drawings, specifications, and computer screens, including close vision and color differentiation.
- Ability to work in a manufacturing environment with varying noise levels, temperatures, and activity.
- Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position. WORK ENVIRONMENT Work is primarily performed in a shop floor environment, where forklifts and other equipment can create a loud noise level. The work is fast-paced and sometimes involves extreme deadline pressures. The nature of the work requires a high degree of teamwork and cooperation with other members of the staff as well as external customers. Note: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications that are required of the employee for the job. Duties, responsib