Job Title:

Lead Cybersecurity Engineer (Compliance)

Type of Position:

DIRECT HIRE

Job Location:

This will be a hybrid role (3 days in office, 2 days remote). We prefer to have candidates based in Oshkosh, WI. Candidates may also be based in McConnellsburg, PA; Hagerstown, MD; or Orlando, FL. Those who are not based in Oshkosh, WI will travel to our headquarters (in Oshkosh, WI) approximately 4 times per year. To be clear, this role is NOT open to fully remote candidates.

Compensation:

$112K/yr to $155K/yr (negotiable, based on experience).

Candidate Requirements:

This role is with a major defense contractor and specialty vehicle manufacturer. While a security clearance is not required for this position, candidates must still meet eligibility criteria for work on federal contracts. U.S. Citizenship or Permanent Residency (Green Card) is required. Candidates on CPT, OPT, H-1B, or TN visas are not eligible. This company is not open to corp-to-corp (C2C) or corp-to-hire (C2H) arrangements. Offers may be contingent upon successful completion of a background check and drug screen (including testing for cannabis).

Benefits:

Available and highly competitive (health insurance, dental, vision, 401k, etc). There will also be a competitive PTO package.

Job Description:

HRU Technical Resources has partnered with a major defense contractor and specialty vehicle manufacturer to hire a Lead Cybersecurity Engineer (Compliance). Our company designs and builds mission-critical vehicles and technology for defense, municipal, and commercial customers worldwide. Protecting the confidentiality, integrity, and availability of our information assets is essential to our mission. In this role, you will be a key part of our cybersecurity compliance program, guiding teams through CMMC, UK Cyber Essentials, PCI DSS, and other regulatory certifications. You will serve as the subject matter expert who translates compliance requirements into actionable, risk-based technical controls. We would love for you to be a part of our team!

Essential Duties and Responsibilities:

• Lead or participate in cybersecurity compliance efforts, including preparation for and execution of assessments (e.g., CMMC).
• Translate cybersecurity control requirements into system-level configurations and interpret system security capabilities for compliance.
• Prepare reports identifying gaps in policies, processes, and controls, and recommend remediation strategies.
• Advise leadership on program budgets and coordinate with regional leads to develop compliance strategies adapted to different cultures and languages.
• Conduct or lead IT audits, presenting findings in a way that is clear to diverse stakeholders.
• Stay informed on research, trends, and developments in all areas of regulatory compliance.
• Serve as a trusted advisor to business functions (Finance, HR, Engineering) and IT teams.
• Ensure business and technical requirements align with policy, regulatory, and contractual compliance.
• Contribute to the development and maintenance of our cybersecurity strategy.

Minimum Qualifications:

• Bachelor’s degree in Cybersecurity, Information Systems, Communications, Computer Science, or equivalent.
• 6 or more years of experience in cybersecurity with direct involvement in regulatory or framework compliance (CMMC, NIST 800-171, PCI, ISO 27001, SOC2, FAR, DFARS, etc.).
• Strong technical background with the ability to translate cybersecurity regulations into technical controls and advise engineering teams.
• Experience participating in or leading cybersecurity compliance assessments such as CMMC or ISO certification.
• Documented and demonstrated experience with defense regulatory compliance requirements including CMMC, NIST, and DFARS.

Preferred Qualifications:

• Graduate degree in Cybersecurity, Information Systems, Management, or equivalent.
• Relevant industry certifications (CISSP, CEH, GIAC, Security+, SSAP, etc.).
• In-depth knowledge of regulatory compliance models (NIST, HIPAA, PCI, ISO, etc.).
• Hands-on design or operational experience in infrastructure, cloud, or application development.
• Knowledge of security controls for networks, applications, and operating systems.
• Experience leading IT audits and communicating technical concepts to non-technical stakeholders.
• Active or eligible for U.S. Government Secret clearance.
• Experience drafting information security policies, procedures, and standards.
• Experience testing effectiveness and adherence of cybersecurity controls.
• Ability to translate complex contractual and regulatory requirements into actionable information system configurations.
• Strong cross-functional collaboration skills.

Work Environment, Other Info:

• We prefer to have candidates based in Oshkosh, WI. Candidates may also be based in McConnellsburg, PA; Hagerstown, MD; or Orlando, FL. Those who are not based in Oshkosh, WI will travel to our headquarters (in Oshkosh, WI) approximately 4 times per year. To be clear, this role is NOT open to fully remote candidates.
• Hybrid schedule with 3 days onsite and two days remote each week.
• Routine office environment with periods of sitting, computer use, and communication.
• Occasional overtime, weekend work, or off shift hours as needed (but this will be quite rare).
• Some stress due to deadlines or cyclical workloads.
• EOE (including Disability/Veterans)

How to Apply for This Job:

To apply for this position, please follow these steps: Apply for this job with your current resume. We’ll get back to you the same day with some feedback on your application. Next you’ll be invited to an online screening conversation so we can go over the job requirements together and you can ask questions. After this stage we’ll give you more feedback on your application and select the candidates to move forward in the process. Typically steps 1 to 4 takes less than 24 hours.

#HRUJobs