IT Director

About Continuum

Continuum Powders is the leader in high-performance, sustainable metal powders with locations across the United States and Singapore. Continuum is the creator of The Greyhound M2P (melt to powder) Platform, a patented cradle-to-cradle process of recycling alloyed metal waste-stream products into powder in a single processing step. The platform affords customers the same high-quality spherical metal powder they use today, and our technology contributes significantly to their decarbonization and sustainability programs.

The role

This is a hands-on leadership role: you will set the direction and also roll up your sleeves. You’ll own the company's multi-year IT roadmap, budget, policies, and governance frameworks -- serving as the senior technology advisor to executive leadership and translating IT risks, investments, and capabilities into clear business terms. You will translate complex regulatory and technical requirements into pragmatic programs, build vendor partnerships that deliver value, and foster a technology culture where every employee is equipped and protected.

What you will own

1. CMMC and regulatory compliance

• Lead Continuum's CMMC Level 2 program end to end: assess current posture, build and execute the remediation roadmap, and carry the company through certification.
• Own the System Security Plan and POA&M in line with NIST SP 800-171, and keep them audit ready.
• Ensure CUI is handled correctly across systems, processes, and people, and keep the program current as DFARS, ITAR, and CMMC rulemaking evolve.
• Serve as the primary point of contact for third party assessors, auditors, and government representatives.
• Partner with Legal, Contracts, and Operations so compliance obligations flow correctly into customer and supplier agreements.

2. Security, infrastructure, and the end user experience

• Mature the security program across threat monitoring, incident response, vulnerability management, and security architecture: firewalls, endpoint protection, SIEM, encryption, IAM, and MFA.
• Lead incident response when it happens: investigate, contain, remediate, and run the post mortem.
• Own the MSP relationship end to end: scope, SLAs, escalation paths, quarterly performance reviews, and accountability for ticket SLAs, first contact resolution, and employee satisfaction.
• Maintain the on-prem and cloud environment (Microsoft 365, Azure, Intune, networking, servers, endpoints) plus disaster recovery and business continuity, tested and documented.
• Build a security aware culture through training and phishing simulations, while keeping controls pragmatic. We want security that protects the business without getting in employees' way.

3. ERP and business systems

• Own the NetSuite environment alongside the Corporate Controller and the Operations project lead.
• Set and enforce data governance standards so master data stays clean and accurate.
• Govern change and release management for ERP updates, and oversee integrations, APIs, and middleware connecting NetSuite, Salesforce, and Power BI.
• Evaluate whether a dedicated ERP managed service partner is the right call, and run that selection if so.
• Stay close enough to the system to unblock users directly on errors and complex saved searches.

What we are looking for

Must have

• 10+ years in IT, including leading teams, budgets, and multi-discipline programs.
• Hands-on experience leading a CMMC, NIST 800-171, or equivalent compliance program in a defense-adjacent or regulated manufacturing environment. This is the one we cannot train.
• Real ownership of an ERP platform (NetSuite, Dynamics, SAP, or equivalent), not just sponsorship of a project.
• A track record negotiating and managing vendor and MSP contracts.
• Comfort operating as an army of one, with the judgment to know what to do yourself and what to hand to a partner.
• Experience supporting multiple sites, including at least one international location.

Nice to have

• CISSP or CISM; CMMC Registered Practitioner or Certified Professional.
• Depth in Microsoft 365, Azure, and Intune.
• Familiarity with SIEM, vulnerability management, and network security tooling.
• Bachelor's degree in a related field. Equivalent experience carries the same weight.

Some domestic travel