IT & Compliance Manager

CMMC & Regulatory Compliance:

• Serve as the primary owner and internal lead for LINK’s CMMC Level 2 certification and third-party assessment.
• Ensure continuous compliance with NIST SP 800-171 controls and CMMC Level 2 practices across all in-scope systems and processes.
• Lead annual self-assessments and support recurring third-party assessments to maintain certification standing.

Managed Service Provider (MSP) Oversight:

• Manage LINK’s MSP relationship for help desk support, laptop provisioning, and device lifecycle management.
• Define clear SLAs, performance expectations, and accountability structures for the MSP.
• Act as the internal escalation point for all MSP-related issues and serve as the primary liaison for the vendor relationship.

Cybersecurity & Incident Response:

• Implement LINK’s cybersecurity program including threat monitoring, vulnerability management, and endpoint protection.
• Manage security awareness training and simulated phishing programs for all staff.
• Manage identity and access management, multi-factor authentication (MFA), and least-privilege access controls.