Develop, implement, and maintain company information security policies, standards, and procedures to ensure compliance with NIST SP 800-171 and DFARS 252.204-7012. Leads efforts to achieve and maintain CMMC and ISO 27001 compliance, including coordinating certification activity.