What are the responsibilities and job description for the Information Security and Compliance Specialist position at Tmsinc?
Technical Metal Specialties is looking to expand their team at New Berlin, WI. Why join the team at Technical Metal Specialties? We are 100% employee owned along with a climate-controlled building! Technical Metal Specialties automatically contributes 3% into your 401k. We also have a competitive paid time off plan, along with 10 paid holidays. Plus, you receive $1,000 hiring bonus and well as 20.0 hours of PTO when you start.
1st Shift/Full-Time: Hours are flexible
With experience, make up to $85,000/year.
Summary
Develops, analyzes, and enforces security policies, manages compliance with CMMC / NIST SP 800-171, and ensures audit readiness through structured documentation, control validation, and risk management. Primary focus: governance, risk, compliance, and audit readiness. Secondary focus: provides limited Tier 1/2 IT support to remain aligned with systems and user workflows.
Essential duties and Responsibilities include the following. Other duties may be assigned.
- Lead and maintain CMMC / NIST SP 800-171 compliance program
- Develop, analyze, and maintain:
- Security policies, procedures, and standards
- System Security Plan (SSP) and POA&M
- Identify compliance gaps and recommend remediation actions
- Maintain audit evidence and ensure controls are documented and verifiable
- Perform risk assessments and document findings
- Partner with IT and business units to align controls with operational realities
- Validate access control, endpoint security, and data handling practices
- Support incident tracking, documentation, and post-incident review
- Provide guidance on proper handling of sensitive data (including CUI, where applicable)
Supervisory Responsibilities
- This position does not currently have supervisory responsibilities.
Qualifications and Education Requirements
- Bachelor’s degree with a technical major and 3 years of related experience or 6 years of experience will satisfy degree and experience requirements.
Additional Experience Preferred
- Experience developing in Epicor utilizing TSQL.
- Experience creating reports in Crystal Reports and/or SSRS.
- Experience working in Incident and Problem management.
- Experience documenting Knowledge Base Articles and SOP’s.