Senior Security & Compliance Analyst

Velosity is searching for a Senior Security and Compliance Analyst to support our manufacturing facility in Brooklyn Park, MN or Forest Lake, MN. A Senior Security and Compliance Analyst is responsible for Velosity's cybersecurity operations, regulated information protection practices, and audit readiness across the enterprise. This role helps protect information systems, manufacturing technology environments, cloud platforms, endpoints, identity systems, and controlled data while supporting business growth in defense, aerospace, and medical device manufacturing.

The typical pay range for this role: $96,000 - $145,000. This role is also eligible for our 5% quarterly bonus target.

This pay range reflects the base hourly rate or annual salary for positions within this job grade, based on our market-based pay structures. Actual compensation will depend on factors such as skills, relevant experience, education, internal equity, business needs, and local market conditions. While the full range is shared for transparency, offers are rarely made at the minimum or maximum of the range.

This position includes a comprehensive benefits package that includes:

• Insurance: Medical, dental, vision, life and disability plans.
• Other Benefits Include: 401(k) with company match, PTO, holidays, and paid parental leave.

This is an on-site position.

Who is Velosity?

Velosity is not your typical manufacturing company.

Founded in 1972, we are a state-of-the-art, custom contract manufacturer and injection molder providing creative solutions to our customers' unique manufacturing challenges.

At Velosity, our culture & values are our competitive advantage. Engrained in everything we do are our values of Collaboration, Results-Driven, Continuous Improvement, Integrity, and Customer Satisfaction. Sound like you? Apply to join our team today.

What You'll Love about Velosity:

• Excellent benefits package including medical, dental, life insurance, short term and long term disability, flex spending, 401k match, and MORE!
• Generous PTO offerings & 9 paid holidays annually
• Clean, friendly, and air-conditioned work environment
• Great opportunities for growth & advancement
• Quarterly bonus opportunity
• A family centric environment that hires and develops talent based on our values
• Casual Dress Code

Essential Duties:

Qualifications:

• One or more industry-recognized cybersecurity certifications preferred, such as CISSP, CISM, CRISC, CCSP, Security+, CySA+, GSEC, or equivalent experience.
• Experience supporting one or more regulated cybersecurity or quality frameworks preferred, such as CMMC Level 2, NIST SP 800-171, DFARS cybersecurity requirements, ITAR/EAR, ISO 27001, ISO 13485, AS9100, or similar compliance frameworks.
• Experience supporting CMMC Level 2, NIST SP 800-171 assessments, C3PAO audits, or defense contractor cybersecurity programs preferred. CMMC Registered Practitioner (RP), Registered Practitioner Advanced (RPA), Certified Assessor (CCA), or similar credentials are a plus.
• 4-7 years of progressive cybersecurity, information security, security operations, or security compliance experience. Equivalent combinations of hands-on cybersecurity operations, regulated industry experience, audit readiness, and compliance program ownership may be considered.
• Experience supporting cybersecurity and compliance programs within regulated manufacturing, defense, aerospace, medical device, government contractor, or similarly controlled environment preferred.
• Experience with secure CUI collaboration platforms and practices preferred, including Exostar Managed on Microsoft 365 or similar controlled collaboration environments.
• Practical experience with CMMC Level 2, NIST SP 800-171, DFARS cybersecurity requirements, CUI/FCI protection, SSPs, POA&Ms, control evidence, and audit readiness.
• Experience with ITAR/EAR-controlled technical data, export-controlled environments, secure collaboration, and access control concepts preferred.
• Hands-on experience with security monitoring, incident response, vulnerability management, endpoint protection, identity and access management, logging, and security reporting.
• Experience with Microsoft security technologies such as Microsoft Defender, Microsoft 365 security, Entra ID, Intune, Purview, Sentinel, or related SIEM/XDR tooling preferred.
• Knowledge of security frameworks and best practices such as NIST Cybersecurity Framework, NIST SP 800-171, CMMC, ISO 27001, CIS Controls, and Zero Trust principles.
• Ability to analyze security events, identify root causes, assess business risk, prioritize remediation, and communicate recommendations clearly.
• Strong written and verbal communication skills, including the ability to explain cybersecurity and compliance concepts to non-technical stakeholders.
• Ability to create clear, audit-ready documentation, reports, procedures, evidence summaries, and executive-level status updates.
• Ability to work independently, collaborate across departments, manage multiple priorities, and sustain change in a fast-paced regulated environment.
• Strong problem-solving, troubleshooting, follow-through, and continuous improvement skills.