IT Director
About Continuum
Continuum Powders is the leader in high-performance, sustainable metal powders with locations across the United States and Singapore. Continuum is the creator of The Greyhound M2P (melt to powder) Platform, a patented cradle-to-cradle process of recycling alloyed metal waste-stream products into powder in a single processing step. The platform affords customers the same high-quality spherical metal powder they use today, and our technology contributes significantly to their decarbonization and sustainability programs.
The role
This is a hands-on leadership role: you will set the direction and also roll up your sleeves. You will translate complex regulatory and technical requirements into pragmatic programs, build vendor partnerships that deliver value, and foster a technology culture where every employee is equipped and protected.
What you will own
CMMC and regulatory compliance
- Lead Continuum's CMMC Level 2 program end to end: assess current posture, build and execute the remediation roadmap, and carry the company through certification.
- Own the System Security Plan and POA&M in line with NIST SP 800-171, and keep them audit ready.
- Ensure CUI is handled correctly across systems, processes, and people, and keep the program current as DFARS, ITAR, and CMMC rulemaking evolve.
- Serve as the primary point of contact for third party assessors, auditors, and government representatives.
- Partner with Legal, Contracts, and Operations so compliance obligations flow correctly into customer and supplier agreements.
Security, infrastructure, and the end user experience
- Mature the security program across threat monitoring, incident response, vulnerability management, and security architecture: firewalls, endpoint protection, SIEM, encryption, IAM, and MFA.
- Lead incident response when it happens: investigate, contain, remediate, and run the post mortem.
- Own the MSP relationship end to end: scope, SLAs, escalation paths, quarterly performance reviews, and accountability for ticket SLAs, first contact resolution, and employee satisfaction.
- Maintain the on-prem and cloud environment (Microsoft 365, Azure, Intune, networking, servers, endpoints) plus disaster recovery and business continuity, tested and documented.
- Build a security aware culture through training and phishing simulations, while keeping controls pragmatic. We want security that protects the business without getting in employees' way.
ERP and business systems
- Own the NetSuite environment alongside the Corporate Controller and the Operations project lead.
- Set and enforce data governance standards so master data stays clean and accurate.
- Govern change and release management for ERP updates, and oversee integrations, APIs, and middleware connecting NetSuite, Salesforce, and Power BI.
- Evaluate whether a dedicated ERP managed service partner is the right call, and run that selection if so.
- Stay close enough to the system to unblock users directly on errors and complex saved searches.
What we are looking for
Must have
- 10+ years in IT, including leading teams, budgets, and multi-discipline programs.
- Hands-on experience leading a CMMC, NIST 800-171, or equivalent compliance program in a defense-adjacent or regulated manufacturing environment. This is the one we cannot train.
- Real ownership of an ERP platform (NetSuite, Dynamics, SAP, or equivalent), not just sponsorship of a project.
- A track record negotiating and managing vendor and MSP contracts.
- Comfort operating as an army of one, with the judgment to know what to do yourself and what to hand to a partner.
- Experience supporting multiple sites, including at least one international location.
Nice to have
- CISSP or CISM; CMMC Registered Practitioner or Certified Professional.
- Depth in Microsoft 365, Azure, and Intune.
- Familiarity with SIEM, vulnerability management, and network security tooling.
- Bachelor's degree in a related field. Equivalent experience carries the same weight.
- Some domestic travel to other Continuum sites and periodic travel to Singapore.