Security and Compliance Manager

Location(s):
Remote, USA
Work Environment:
Hybrid/Remote
Compensation: $115,000–$135,000 annually*

Dudek’s journey began in 1980 with a vision to serve Southern California’s water and wastewater agencies.

Today, we are a 100% employee-owned firm supporting clients nationwide and delivering projects that improve and protect the built and natural environments of communities throughout the United States. Our work has been recognised by leading industry organizations, and we’ve been honoured with multiple national Top Workplace Awards.

Our employee-owners are unified by a singular commitment to supporting projects that address key societal issues, such as the transition to renewable energy, infrastructure hardening and repair, environmental protection, and community resilience.

Learn more about our
award-winning culture
, the
benefits and perks
of being aDudekian, and the
projects
you will have the opportunity to shape.

Who You Are

As an employee-owner
, you embrace accountability, working safely, and collaboration while thinking resourcefully and independently.

Like all Dudekians, you are curious and solution-oriented, with the ability to adapt quickly to changes and approach challenges with a spirit of innovation.

How You’ll Make an Impact

As a Security & Compliance Manager, you'll be responsible for overseeing Dudek's cybersecurity operations, managing security service providers, and ensuring the protection of company systems, technology, and sensitive data. You'll play a key role in identifying and mitigating security risks, strengthening security controls, and supporting compliance with applicable regulatory and contractual requirements.

This is a hands-on leadership opportunity for a cybersecurity professional who brings strong technical expertise and a practical, risk-based approach to information security. You'll collaborate with internal teams and external partners to maintain effective security operations while supporting Dudek's business objectives.

This role is part of our Information Technology (IT) department and reports directly to the Chief Information Officer (CIO).

Duties and Responsibilities

• Partnering with the CIO and business leaders responsible for ensuring the security, compliance, and risk management of the company technology and data portfolio in concert with legal, regulatory, and contractual commitments.
• Responsible for identifying and acting on opportunities for process improvement, process mapping and related documentation, communication of new processes to applicable stakeholders and identification of appropriate automation and process technology to support further improvements.
• Managing the relationship and ongoing coordination of managed service security providers (MSSP’s).
• Manage IT controls program to ensure the ongoing operational effectiveness, review, and auditing of a core set of internal controls.
• Lead efforts to ensure IT compliance with industry (e.g., local, state, federal) and contractual regulations & requirements.
• Collaborate with cross-functional teams and security service providers to integrate security measures into the development and maintenance of IT systems and applications.
• Manage incident response, escalation, and resolution for security breaches or incidents, implementing corrective actions and preventive measures.
• Proactively monitor and assess emerging threats, trends, and technologies in the cybersecurity landscape and recommend proactive measures to mitigate risks.
• Conduct regular security assessments, audits, and ongoing vulnerability management operations to identify potential risks and weaknesses in systems and processes.
• Interface with external auditors, regulatory bodies, and customers, as necessary, on security and compliance…