Lead Cybersecurity Engineer

W2 only, no C2C, must be authorized to work in the US (both now and in the future).

Lead Cybersecurity Engineer (Direct Hire) - Hybrid in Oshkosh, Wisconsin. Apply now for this opportunity at Carex! Carex is partnering with a global industrial technology and specialty vehicle manufacturing partner to hire a Lead Cybersecurity Engineer to support the organization’s mission of safeguarding critical data systems. This role will lead and contribute to compliance efforts across a range of regulatory frameworks, including CMMC, NIST, UK Cyber Essentials, PCI DSS, and others. The successful candidate will translate complex cybersecurity requirements into pragmatic, risk-based system controls while collaborating across technical and business teams.

This role is not accepting C2C candidates or candidates that will require sponsorship now or in the future.

What You’ll Do

• Lead and support cybersecurity compliance activities including assessments, audits, and implementation of standards such as CMMC, NIST 800-171, PCI, ISO 27001, and SOC2.
• Interpret and implement technical security requirements in alignment with organizational policies, regulatory frameworks, and risk management strategies.
• Develop reports and gap analyses, identifying non-compliance issues and recommending remediation plans.
• Act as a trusted advisor across functional business areas and IT domains including infrastructure, cloud, and applications.
• Draft and maintain cybersecurity policies, procedures, and standards to support regulatory and contractual compliance.
• Contribute to the development of cybersecurity strategy and ensure alignment with business and technical goals.
• Collaborate with cross-functional stakeholders to define compliance plans tailored to various regions, cultures, and languages.
• Lead or conduct internal IT audits and communicate findings clearly to both technical and non-technical audiences.
• Maintain awareness of evolving compliance standards and support internal readiness for certification and re-certification activities.
• Serve as a liaison between cybersecurity leadership and business units to ensure implementation of effective and sustainable controls.
  
  
  

What You’ll Bring

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• 6 years of experience in cybersecurity with a strong focus on regulatory and framework compliance (e.g., CMMC, NIST 800-171, PCI, ISO, SOC2, FAR/DFARS).
• Experience translating cybersecurity requirements into system-level configurations and control implementations.
• Familiarity with network, application, and operating system security controls.
• Proven ability to conduct IT audits and articulate findings to diverse audiences.
• Strong analytical, problem-solving, and communication skills across technical and executive levels.
• Experience collaborating within cross-functional and cross-departmental environments.
• Relevant certifications preferred (CISSP, Security , CEH, GIAC, etc.).
• A graduate degree or advanced training in Cybersecurity or a related discipline is a plus.
• Eligibility for U.S. Government Secret clearance is preferred.
  
  
  

Carex Consulting Group is an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity, or Veteran status.