Security and Compliance Manager

Dudek; United States; Hybrid; USD 115,000 - 135,000; Full time

Job summary

Dudek, a 100% employee-owned firm, is seeking a Security & Compliance Manager to oversee cybersecurity operations, manage MSSPs, and protect company data across remote and hybrid environments.

You will drive risk-based security, ensure regulatory compliance, collaborate with IT teams and external partners, and report to the CIO in a fast-paced, values-driven culture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Proven experience in internal controls, information security, risk management, and compliance roles.
• Experience leading IT audits and remediation activities.
• Knowledge of NIST CSF, 800-53, 800-171, and security best practices.
• Experience with cloud security service providers and tools.

Responsibilities

• Partner with CIO and business leaders to ensure security, compliance, and risk management.
• Identify opportunities for process improvement and automation.
• Manage MSSP relationships and IT controls program.
• Lead IT compliance with regulations and contractual requirements.
• Collaborate with cross-functional teams to integrate security measures.
• Manage incident response and corrective actions.
• Monitor emerging threats and perform regular security assessments.

Skills

Security governance

Risk assessment

IT audits

Compliance management

Security controls

Incident response

Vulnerability management

Cloud security

Regulatory compliance

Communication skills

Education

Bachelor's degree in Computer Science, Information Technology, or related field

CISSP/CISM/CISA certifications preferred

Job description

Overview

Location(s): Remote, USAWork Environment: Hybrid/RemoteCompensation: $115,000–$135,000 annually*

Dudek’s journey began in 1980 with a vision to serve Southern California’s water and wastewater agencies.

Today, we are a 100% employee-owned firm supporting clients nationwide and delivering projects that improve and protect the built and natural environments of communities throughout the United States. Our work has been recognised by leading industry organizations, and we’ve been honoured with multiple national Top Workplace Awards.

Our employee-owners are unified by a singular commitment to supporting projects that address key societal issues, such as the transition to renewable energy, infrastructure hardening and repair, environmental protection, and community resilience.

Learn more about ouraward-winning culture, thebenefits and perksof being aDudekian, and theprojectsyou will have the opportunity to shape.

Position Overview

Who You Are

As an employee-owner, you embrace accountability, working safely, and collaboration while thinking resourcefully and independently.

Like all Dudekians, you are curious and solution-oriented, with the ability to adapt quickly to changes and approach challenges with a spirit of innovation.

How You’ll Make an Impact

As a Security & Compliance Manager, you'll be responsible for overseeing Dudek's cybersecurity operations, managing security service providers, and ensuring the protection of company systems, technology, and sensitive data. You'll play a key role in identifying and mitigating security risks, strengthening security controls, and supporting compliance with applicable regulatory and contractual requirements.

This is a hands-on leadership opportunity for a cybersecurity professional who brings strong technical expertise and a practical, risk-based approach to information security. You'll collaborate with internal teams and external partners to maintain effective security operations while supporting Dudek's business objectives.

This role is part of our Information Technology (IT) department and reports directly to the Chief Information Officer (CIO).

Duties and Responsibilities

• Partnering with the CIO and business leaders responsible for ensuring the security, compliance, and risk management of the company technology and data portfolio in concert with legal, regulatory, and contractual commitments.
• Responsible for identifying and acting on opportunities for process improvement, process mapping and related documentation, communication of new processes to applicable stakeholders and identification of appropriate automation and process technology to support further improvements.
• Managing the relationship and ongoing coordination of managed service security providers (MSSP’s).
• Manage IT controls program to ensure the ongoing operational effectiveness, review, and auditing of a core set of internal controls.
• Lead efforts to ensure IT compliance with industry (e.g., local, state, federal) and contractual regulations & requirements.
• Collaborate with cross-functional teams and security service providers to integrate security measures into the development and maintenance of IT systems and applications.
• Manage incident response, escalation, and resolution for security breaches or incidents, implementing corrective actions and preventive measures.
• Proactively monitor and assess emerging threats, trends, and technologies in the cybersecurity landscape and recommend proactive measures to mitigate risks.
• Conduct regular security assessments, audits, and ongoing vulnerability management operations to identify potential risks and weaknesses in systems and processes.
• Interface with external auditors, regulatory bodies, and customers, as necessary, on security and compliance matters.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field; relevant certifications (e.g., CISSP, CISM, CISA) preferred.
• Proven experience in internal controls, information security, risk management, and compliance roles.
• Experience leading and conducting IT audits and remediation activities.
• Strong knowledge of security frameworks (e.g., NIST CSF), security standards (e.g. 800-53, 800-171), and industry best practices.
• Experience working with CMMC Level 2 compliant environments.
• Proficiency in conducting security assessments, vulnerability management operations, and implementing security controls.
• Experience with cloud security service providers, tools, and technologies.
• Strong analytical and analysis capabilities and related communications.
• Ability to work effectively in a collaborative team environment and manage multiple priorities.

Preferred Qualifications

• Relevant certifications (e.g., CISSP, CISM, CISA), as identified in the original qualifications.

Compensation: $115,000–$135,000 annually*

*Finalagreed-upon compensation will be based on a variety of factors including, but not limited to, an individual’s related experience, education, certifications, skills, and work location. Successful candidates must pass a pre-employment drug test and background check prior to beginning employment.

Working Conditions

• This job operates in a remote or office-based environment and this role routinely uses standard office equipment such as computers, phones, printers, etc.

Physical Requirements

The physical demands described here are representative of those that must be met to successfully perform the essential functions of the job. This job requires the following:

• Working on a computer, sitting, or standing for long periods of time in an office or remote office setting.

• Attending meetings, both in person and virtually, and speaking on the phone with peers, clients, etc.
• Specific vision abilities, including close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

Connect with us!

LinkedIn

Instagram

YouTube

Dudek Talent Community

Dudek is committed to creating a workplace where all employees, regardless of their background, feel valued, respected, and have equal opportunities to succeed. We believe that a diverse and inclusive workforce is essential to our business success, and we are dedicated to fostering a culture where everyone can thrive. We are committed to fair and equitable processes, based on merit, free from any discrimination.

Dudek is genuinely committed to equal employment opportunities within our company and on our project teams. Dudek is also committed to compliance with all applicable laws providing equal employment opportunities. This commitment applies to all persons involved in Dudek’s operations and prohibits unlawful discrimination by any employee of Dudek, including supervisors and coworkers. Equal employment opportunities will be extended to all persons (including those with disability and veteran status) in all aspects of the employment relationship, including recruitment, hiring, training, promotion, transfer, compensation, benefits, discipline, layoff, recall, and termination. Any employee who violates this policy and Dudek’s commitment to equal employment opportunities will be subject to disciplinary action.

Dudek is a U.S.-based employer. All positions are based in the United States and require U.S. work authorization.