IT Director

About the Role

The Director of IT is a senior leadership role responsible for the strategy, execution, and governance of Continuum’s entire IT function. This leader oversees cybersecurity, CMMC compliance, ERP infrastructure, management of vendors, and the end-user support experience — ensuring that technology is a reliable, secure, and competitive enabler of the business.

Key Responsibilities

• IT Strategy & Leadership

• Develop and own the company’s multi-year IT roadmap, aligned to business growth, operational scale, and security requirements.
• Serve as the senior technology advisor to executive leadership; translate IT risks, investments, and capabilities into clear business terms.
• Manage the IT budget: develop annual plans, allocate resources strategically, and demonstrate measurable return on technology investment.
• Establish IT policies, standards, and governance frameworks to ensure consistency, compliance, and operational excellence.
• Build, mentor, and manage the IT team , fostering a culture of accountability, continuous improvement, and customer service.

• Cybersecurity

• Continuously mature the company’s cybersecurity program, including threat monitoring, incident response, vulnerability management, and security architecture.
• Design, implement, and maintain layered security controls: firewalls, endpoint protection, SIEM, encryption, identity and access management (IAM), and MFA.
• Lead response to cybersecurity incidents — investigation, containment, remediation, and post-incident review.
• Conduct or commission regular security risk assessments, penetration tests, and audits; track remediation to closure.
• Create an environment that is not too draconian and allows certain abilities with users e.g. connecting to a printer.

• CMMC & Regulatory Compliance

• Lead the company’s Cybersecurity Maturity Model Certification (CMMC) program: assess current posture, develop and execute the remediation roadmap, and manage certification readiness.
• Maintain a System Security Plan (SSP) and Plan of Action & Milestones (POA&M) in accordance with NIST SP 800-171 and CMMC Level 2 (or applicable level) requirements.
• Ensure ongoing compliance with CUI (Controlled Unclassified Information) handling requirements across systems, processes, and personnel.
• Monitor evolving regulatory requirements (NIST, ITAR, DFARS, CMMC rulemaking) and proactively adapt the compliance program.
• Coordinate with legal, contracts, and operations teams to ensure IT compliance requirements are reflected in customer and supplier agreements.
• Serve as the primary point of contact for third-party assessors, auditors, and government representatives on IT compliance matters.

• ERP Implementation, Infrastructure & Continuous Improvement

• Partner with functional leaders to improve the functionality of the current tech stack – NetSuite, Sales Force and Power BI.
• Govern change of release management for ERP updates.
• Oversee integrations with other systems into ERP including API’s and middleware.
• Assist with user support on error messages and creating complex saved searches.
• Evaluate a ERP dedicated MSP.

• Vendor Management

• Build and manage a portfolio of IT vendors and service providers (hardware, software, cloud, managed services, cybersecurity).
• Lead contract negotiations to secure favorable commercial terms; define SLAs, performance metrics, and escalation paths.
• Conduct regular vendor performance reviews; hold partners accountable to commitments and proactively address risks.
• Evaluate and rationalize the vendor landscape to reduce complexity, eliminate redundancy, and optimize spend.
• Manage the full vendor lifecycle: selection, onboarding, ongoing governance, and offboarding.

• End-User Support & IT Infrastructure

• Contract and manage a Managed Service Provider (MSP) to deliver IT helpdesk and end-user support; define scope, SLAs, and escalation paths to ensure a high-quality employee experience.
• Define the standards, tooling (ticketing system, remote support, asset management), and workflows the MSP operates within; ensure alignment with internal IT governance and security policies.
• Retain oversight of all end-user support outcomes -- even when delivered by the MSP -- including ticket SLA adherence, first-contact resolution rates, and employee satisfaction (CSAT).
• Own disaster recovery and business continuity planning, including regular testing and documentation.
• Manage software and hardware procurement, asset lifecycle, and license compliance.

Qualifications

• Experience & Education

• 10+ years of progressive IT experience, including at least 3 years in a leadership role managing teams, budgets, and multi-discipline IT programs.
• Demonstrated hands-on experience leading a CMMC, NIST 800-171, or equivalent compliance program in a defense-adjacent or regulated manufacturing environment.
• Proven ERP administration and project leadership experience (Microsoft Dynamics, SAP, NetSuite, or equivalent).
• Strong track record in vendor negotiation and contract management.
• Bachelor’s degree in Computer Science, Information Technology, or a related field preferred; equivalent experience considered.

• Technical Skills

• Deep knowledge of cybersecurity frameworks: NIST CSF, NIST SP 800-171, CMMC, ISO 27001.
• Proficiency with Microsoft 365, Azure, Intune, and enterprise endpoint management.
• Familiarity with SIEM platforms, vulnerability management tools, and network security technologies (firewalls, IDS/IPS, VPN).
• Understanding of ERP architecture, integrations, and data management concepts.
• Experience with ITIL or similar IT service management frameworks.

• Certifications (Preferred)

• CISSP, CISM, or CISA
• CompTIA Security+, CySA+
• CMMC Registered Practitioner (RP) or Certified Professional (CP)
• PMP or equivalent project management certification

• Desired Qualities

• Strategic thinker who also executes — comfortable moving between boardroom conversations and hands-on technical work.
• Strong communicator - able to translate complex IT and compliance concepts into plain language for executives, auditors, and end-users alike.
• Proactive risk manager — stays ahead of threats rather than reacting to them.
• Collaborative partner — builds trust with cross-functional stakeholders and is seen as a business enabler, not a gatekeeper.
• High integrity and accountability - takes ownership of outcomes.
• Thrives in a fast-paced, growth-stage company where priorities evolve and agility is valued.

Work Environment and Physical Requirements of the role

The position is largely based in an office environment, with regular interaction in the manufacturing facility (loud noises, moving mechanical parts and exposure to metal powders), Laboratory and office environment. Strict adherence to safety protocols is required to minimize risks associated with handling hazardous materials. The role requires wearing appropriate personal protective equipment (PPE), including steel-toe shoes, protective eyewear, earplugs and respiratory equipment (when working with metal powders).

Travel

Some domestic travel may be required.