About the Role
The Director of IT is a senior leadership role responsible for the strategy, execution, and governance of Continuum’s entire IT function. This leader oversees cybersecurity, CMMC compliance, ERP infrastructure, management of vendors, and the end-user support experience — ensuring that technology is a reliable, secure, and competitive enabler of the business.
This is a hands-on leadership role: you will set the direction and also roll up your sleeves. You will translate complex regulatory and technical requirements into pragmatic programs, build vendor partnerships that deliver value, and foster a technology culture where every employee is equipped and protected.
Key Responsibilities
IT Strategy & Leadership
- Develop and own the company’s multi-year IT roadmap, aligned to business growth, operational scale, and security requirements.
- Serve as the senior technology advisor to executive leadership; translate IT risks, investments, and capabilities into clear business terms.
- Manage the IT budget: develop annual plans, allocate resources strategically, and demonstrate measurable return on technology investment.
- Establish IT policies, standards, and governance frameworks to ensure consistency, compliance, and operational excellence.
- Future: Build, mentor, and manage the IT team , fostering a culture of accountability, continuous improvement, and customer service.
Cybersecurity
- Continuously mature the company’s cybersecurity program, including threat monitoring, incident response, vulnerability management, and security architecture.
- Design, implement, and maintain layered security controls: firewalls, endpoint protection, SIEM, encryption, identity and access management (IAM), and MFA.
- Lead response to cybersecurity incidents — investigation, containment, remediation, and post-incident review.
- Conduct or commission regular security risk assessments, penetration tests, and audits; track remediation to closure.
- Build and sustain a cybersecurity-aware culture through training programs, phishing simulations, and ongoing employee education.
- Partner with managed security service providers (MSSPs) and specialized third parties to extend capabilities as needed.
- Create an environment that is not too draconian and allows certain abilities with users e.g. connecting to a printer.
CMMC & Regulatory Compliance
- Lead the company’s Cybersecurity Maturity Model Certification (CMMC) program: assess current posture, develop and execute the remediation roadmap, and manage certification readiness.
- Maintain a System Security Plan (SSP) and Plan of Action & Milestones (POA&M) in accordance with NIST SP 800-171 and CMMC Level 2 (or applicable level) requirements.
- Ensure ongoing compliance with CUI (Controlled Unclassified Information) handling requirements across systems, processes, and personnel.
- Monitor evolving regulatory requirements (NIST, ITAR, DFARS, CMMC rulemaking) and proactively adapt the compliance program.
- Coordinate with legal, contracts, and operations teams to ensure IT compliance requirements are reflected in customer and supplier agreements.
- Serve as the primary point of contact for third-party assessors, auditors, and government representatives on IT compliance matters.
- Finalize DD2345 documentation
ERP Implementation, Infrastructure & Continuous Improvement
- Establish data governance standards before and during implementation to ensure clean, accurate master data at go-live.
- Partner with functional leaders to improve the functionality of the current tech stack – NetSuite, Sales Force and Power BI.
- Co-lead a continuous improvement with the Corporate Controller and Operations project lead.
- Govern change of release management for ERP updates
- Oversee integrations with other systems into ERP including API’s and middleware
- Assist with user support on error messages and creating complex saved searches
- Evaluate a ERP dedicated MSP
Vendor Management
- Build and manage a portfolio of IT vendors and service providers (hardware, software, cloud, managed services, cybersecurity,).
- Lead contract negotiations to secure favorable commercial terms; define SLAs, performance metrics, and escalation paths.
- Conduct regular vendor performance reviews; hold partners accountable to commitments and proactively address risks.
- Evaluate and rationalize the vendor landscape to reduce complexity, eliminate redundancy, and optimize spend.
- Manage the full vendor lifecycle: selection, onboarding, ongoing governance, and offboarding.
End-User Support & IT Infrastructure
- Contract and manage a Managed Service Provider (MSP) to deliver IT helpdesk and end-user support; define scope, SLAs, and escalation paths to ensure a high-quality employee experience.
- Serve as the internal owner and escalation point for the MSP relationship: conduct regular performance reviews, hold the provider accountable to commitments, and drive continuous improvement.
- Define the standards, tooling (ticketing system, remote support, asset management), and workflows the MSP operates within; ensure alignment with internal IT governance and security policies.
- Retain oversight of all end-user support outcomes -- even when delivered by the MSP -- including ticket SLA adherence, first-contact resolution rates, and employee satisfaction (CSAT).
- Maintain and optimize the company's IT infrastructure: on-prem and cloud systems, networking, servers, endpoints, and collaboration tools (Microsoft 365, Intune, Azure).
- Own disaster recovery and business continuity planning, including regular testing and documentation.
- Manage software and hardware procurement, asset lifecycle, and license compliance.
Qualifications
Experience & Education
- 10+ years of progressive IT experience, including at least 3 years in a leadership role managing teams, budgets, and multi-discipline IT programs.
- Demonstrated hands-on experience leading a CMMC, NIST 800-171, or equivalent compliance program in a defense-adjacent or regulated manufacturing environment.
- Proven ERP administration and project leadership experience (Microsoft Dynamics, SAP, NetSuite, or equivalent).
- Strong track record in vendor negotiation and contract management.
- Bachelor’s degree in Computer Science, Information Technology, or a related field preferred; equivalent experience considered.
Technical Skills
- Deep knowledge of cybersecurity frameworks: NIST CSF, NIST SP 800-171, CMMC, ISO 27001.
- Proficiency with Microsoft 365, Azure, Intune, and enterprise endpoint management.
- Familiarity with SIEM platforms, vulnerability management tools, and network security technologies (firewalls, IDS/IPS, VPN).
- Understanding of ERP architecture, integrations, and data management concepts.
- Experience with ITIL or similar IT service management frameworks.
Certifications (Preferred)
- CISSP, CISM, or CISA
- CompTIA Security+ or CySA+
- CMMC Registered Practitioner (RP) or Certified Professional (CP)
- PMP or equivalent project management certification
Desired Qualities
- Strategic thinker who also executes — comfortable moving between boardroom conversations and hands-on technical work.
- Strong communicator - able to translate complex IT and compliance concepts into plain language for executives, auditors, and end-users alike.
- Proactive risk manager — stays ahead of threats rather than reacting to them.
- Collaborative partner — builds trust with cross-functional stakeholders and is seen as a business enabler, not a gatekeeper.
- High integrity and accountability - takes ownership of outcomes.
- Thrives in a fast-paced, growth-stage company where priorities evolve and agility is valued.
Work Environment and Physical Requirements of the role
- The position is largely based in an office environment, with regular interaction in the manufacturing facility (loud noises, moving mechanical parts and exposure to metal powders), Laboratory and office environment.
- Strict adherence to safety protocols is required to minimize risks associated with handling hazardous materials.
- The role requires wearing appropriate personal protective equipment (PPE), including steel-toe shoes, protective eyewear, earplugs and respiratory equipment (when working with metal powders).
Travel
Some domestic travel may be required.
