Information Security Lead -- IT Infrastructure & Cybersecurity

Information Security Lead - IT Infrastructure & Cybersecurity

? Location: Whippany, NJ - Primarily Onsite, 5 Days/Week

? Duration: 6-Month Contract-to-Hire

? Start: ASAP

About the Role

We're looking for an Information Security Lead with strong hands-on experience across cybersecurity and Windows-based IT infrastructure.

This is a blended role within a small local IT team. The ideal candidate will take ownership of day-to-day security operations while also supporting servers, infrastructure, networking, identity, and general IT operations.

The role is heavily focused on CMMC Level 2, CUI protection, NIST 800-171, security monitoring, vulnerability management, identity/access management, and infrastructure security.

Required Qualifications

• 3+ years of relevant IT Operations or Information Security experience; 5-7+ years preferred
• Hands-on experience across both Cybersecurity and Windows IT Infrastructure
• Knowledge of CMMC, CUI, and NIST 800-171
• Familiarity with DFARS, ITAR, or export-control requirements is a plus
• Experience with:
• Windows Server
• Active Directory / Entra ID
• Microsoft 365
• Networking
• Firewalls
• VPN
• Endpoint Management
• Security Tools
• Familiarity with SIEM, EDR, and vulnerability scanning
• Experience with CrowdStrike Falcon, Tanium, ThreatLocker, or similar tools
• Strong communication, documentation, ownership, and problem-solving skills
• Comfortable working independently in a small-team environment

Preferred

• Aerospace, defense, manufacturing, or other regulated-industry experience
• GCC High experience
• Security audit/compliance experience
• Relevant security or networking certifications
• Syteline ERP experience is a plus, but not required

Work Authorization

W2 Only. Candidates must meet the company's U.S. person/export-controlled access requirements. No visa sponsorship is available now or in the future.

Key Skills: Information Security, Cybersecurity, CMMC Level 2, CUI, FCI, NIST 800-171, DFARS, ITAR, Windows Server, Active Directory, Entra ID, Microsoft 365, SIEM, EDR, CrowdStrike, Tanium, ThreatLocker, Vulnerability Management, Incident Response, Firewall, VPN, Network Security, MFA, SSO, Endpoint Security, Security Compliance.