Networking, Security & Compliance Manager

Company Overview:

Nelson Global engineers, manufactures, and distributes clean and efficient Air & Fluid Transfer, NVH, Complex Structural, Acoustic, and Thermal Management Solutions. Nelson Global partners with the world’s leading OEMs. With 22 global manufacturing and distribution facilities and unparalleled engineering and innovation capabilities, Nelson Global provides mission critical solutions with the highest degree of reliability at the lowest cost. Our dedication to serving our employees, partners, and the planet responsibly is realized across three pillars of sustainability: environmental, social, and governance. By empowering our people, reducing waste, and developing innovative and efficient systems, we support the communities and resources that spur the industries and technologies of the future.

Position Overview:

The Networking, Security & Compliance Manager is the single accountable owner for Nelson Global's cybersecurity program, customer and regulatory compliance frameworks, and day-to-day network operations across all sites. It is a senior individual contributor reporting to the Director of IT.

Primary Responsibilities & Duties:

Compliance & Customer Assurance

• Own TISAX certification for PACCAR and Daimler scopes, including the audit cycle, evidence, and the external PM handoff
• Own CMMC/NIST 800-171 readiness: maintain the System Security Plan, POA&M, and SPRS score; respond to DFARS flow-downs from AM General, GDLS, Oshkosh, and other defense customers
• Complete customer cybersecurity surveys and questionnaires (Hyster-Yale, Oshkosh, and similar) on time and keep a reusable answer library
• Support IATF and ISO audits, cyber-insurance renewals, and M&A security diligence requests
• Maintain the Written Information Security Program (WISP) and related policies; track regulatory changes that affect the business

Security Operations

• Manage the Arctic Wolf MDR relationship: triage alerts, drive remediation, and report on posture
• Lead incident response: maintain the IR plan, run annual tabletop exercises, and meet customer incident-reporting obligations (including 72-hour notice requirements)
• Own data loss prevention (DLP) configuration and monitoring across Microsoft 365 and endpoints
• Own AI governance: acceptable-use policy, tool approvals, and data-handling controls
• Run vulnerability management and coordinate penetration tests

Network Operations

• Lead day-to-day network operations across all Nelson Global sites: Meraki and FortiGate firewalls, switching, wireless, and WAN
• Lead the Cato migration and subsequent SASE operations
• Manage the network managed-services vendor (hardware support and smart hands) and hold them to SLA
• Maintain network documentation, change control, and site standards

Leadership

• Act as the named security contact for customers, auditors, insurers, and legal counsel
• Report program status, risks, and metrics to the Director of IT and executive leadership
• Coach IT staff and site contacts on security practices; mentor as the team grows

Required Education & Experience:

• 7 years in IT with at least 3 years owning security or compliance outcomes in a manufacturing or industrial environment
• Hands-on experience with at least one of: TISAX, NIST 800-171/CMMC, ISO 27001, or a comparable customer-driven security framework, including audit preparation
• Working knowledge of firewalls, switching, wireless, and WAN operations; able to troubleshoot and lead changes, not only manage vendors
• Experience running incident response and working with a managed detection and response provider
• Able to write clear policies, audit responses, and customer questionnaire answers
• S. person status (ITAR/EAR controlled data)

Preferred Experience:

• Meraki, FortiGate, and Cato (or another SASE platform) experience
• Microsoft 365 security and compliance tooling (Purview DLP, Defender, Entra)
• CISSP, CISM, Security , or equivalent certification
• Experience supporting defense (DFARS) and automotive (TISAX/IATF) customers
• Prior work in a multi-site company with a distributed IT team
• Familiarity with Nelson Global's current compliance standards and customer requirements (TISAX, CMMC/NIST 800-171, IATF, ISO)

Working Conditions:

• Based at Stoughton, WI headquarters; remote work from the Troutdale, OR site will be considered
• Core hours cover Central time zone for network operations
• Occasional travel to other Nelson Global sites for audits and network work