Cybersecurity Compliance Manager

Description

Gentex at a Glance:

At Gentex Corporation, we’ve created an environment where great ideas and great people can thrive. Leveraging a history that spans over 130 years, Gentex is a global leader in personal protection and situational awareness solutions for defense forces, emergency responders, and industrial personnel operating in high performance environments. Join our multinational team of exceptional and dedicated employees around the world and work on challenging and rewarding projects, grow your skills, and advance your career all while making a positive difference in the lives of our customers.

Together, you and Gentex can build a career that’s uniquely yours.

About the Job!

The Cybersecurity Compliance Manager plays a critical role ensuring that our organization adheres to regulatory, contractual, and DoD cybersecurity requirements. This role is particularly important because of our handling of sensitive data, Controlled Unclassified Information (CUI), and our required adherence to a CMMC 2.0 framework.

Gentex offers a robust benefit package- including, but not limited to, medical/dental coverages, 401k, paid time off and excellent work schedules including a 9/80 work week.

• Bachelor’s degree required.
• Certifications CISSP, CISM, or CCP.
• Minimum 5–10 years of experience in cybersecurity, IT governance, risk management, or compliance.
• Minimum 3–5 years of direct experience in managing compliance programs or audits.
• Experience in industries with strict regulatory requirements, such as defense contracting, healthcare, finance, or government.
• Familiarity with handling Controlled Unclassified Information (CUI) or other sensitive data is often required for roles tied to CMMC 2.0 compliance.

• Understanding of cybersecurity principles:
  • Access control and identity management.
  • Network security and segmentation.
  • Data encryption (at rest and in transit).
  • Vulnerability management and patching.
  • Incident response and disaster recovery.
• Experience with tools and technologies used in cybersecurity, such as:
  • SIEM (e.g., Splunk, Microsoft Sentinel) for monitoring and logging.
  • Vulnerability Scanners (e.g., Tenable Nessus, Qualys).
  • Endpoint Detection and Response (EDR) tools (e.g., Crowd Strike, Microsoft Defender for Endpoint).
  • Privileged Access Management (PAM) tools (e.g., PAM
    360, Cyber Ark).
  • Configuration Management tools (e.g. Ansible, Puppet, Chef).
• IT Infrastructure Knowledge:
  • Operating systems (Windows, Linux, macOS).
  • Cloud platforms (AWS, Azure, Google Cloud).
  • Networking concepts (firewalls, VPNs, VLANs, IDS/IPS).
• Experience implementing and managing compliance with:
  • CMMC 2.0 (Cybersecurity Maturity Model Certification).
  • NIST SP 800-171 (Protecting Controlled Unclassified Information).
  • ISO 27001 (Information Security Management Systems).
  • GDPR (General Data Protection Regulation).
  • HIPAA (Health Insurance Portability and Accountability Act).
  • SOX (Sarbanes-Oxley Act).
• Experience preparing for and managing internal and external audits, including:
  • Conducting gap analyses to identify compliance deficiencies.
  • Developing and maintaining System Security Plans (SSPs) and Plan of Action and Milestones (POA&M).
  • Working with third-party assessors (e.g., C3
    
    PAOs for CMMC certification).
• Leadership and Team Management:
  • Experience leading cross-functional teams, including IT, security, legal, and HR.
  • Ability to manage compliance projects, including timelines, budgets, and resources.
  • Experience mentoring and training team members on compliance requirements.
• Communication
  
  Skills:
  • Ability to communicate complex cybersecurity and compliance concepts to non-technical stakeholders, including executives and board members.
  • Experience preparing compliance reports and presentations for leadership.
  • Strong writing skills for creating policies, procedures, and documentation.
• Collaboration:
  • Experience working with external stakeholders, such as auditors, regulators, and clients.
  • Ability to collaborate across departments to ensure compliance is integrated into all business processes.
• Problem‑Solving:
  • Strong analytical and problem‑solving skills to address compliance gaps and security risks.
  • Ability to adapt to…