Security and Compliance Manager

Dudek•Remote,

1d•$115,000 - $135,000•Remote

About The Position

The Security and Compliance Manager oversees Dudek’s cybersecurity operations, manages security service providers, and helps protect company systems, technology, and sensitive data. The role identifies and mitigates security risks, strengthens security controls, and supports compliance with applicable regulatory and contractual requirements. It is a hands-on leadership role that collaborates with internal teams and external partners to maintain effective security operations in support of business objectives. The position is part of the Information Technology department and reports directly to the Chief Information Officer (CIO). Dudek is a 100% employee-owned firm supporting clients nationwide and delivering projects that improve and protect built and natural environments. The company describes its culture as collaborative, accountable, resourceful, adaptable, and solution-oriented. The position is based in the United States and may be performed remotely or in an office-based environment. Compensation is $115,000–$135,000 annually. Final compensation depends on factors including related experience, education, certifications, skills, and work location. Candidates must pass a pre-employment drug test and background check. U.S. work authorization is required.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field.
Proven experience in internal controls, information security, risk management, and compliance roles.
Experience leading and conducting IT audits and remediation activities.
Strong knowledge of security frameworks such as NIST CSF, security standards such as 800-53 and 800-171, and industry best practices.
Experience working with CMMC Level 2 compliant environments.
Proficiency in conducting security assessments and vulnerability management operations, and implementing security controls.
Experience with cloud security service providers, tools, and technologies.
Strong analytical capabilities and related communication skills.
Ability to work effectively in a collaborative team environment and manage multiple priorities.

Nice To Haves

Relevant certifications, such as CISSP, CISM, or CISA.

Responsibilities

Partner with the CIO and business leaders to ensure the security, compliance, and risk management of the company’s technology and data portfolio in line with legal, regulatory, and contractual commitments.
Identify process improvement opportunities, map and document processes, communicate new processes to relevant stakeholders, and identify appropriate automation and process technologies.
Manage relationships and ongoing coordination with managed security service providers (MSSPs).
Manage the IT controls program, including ongoing operational effectiveness, review, and auditing of core internal controls.
Lead efforts to ensure IT compliance with applicable industry and contractual regulations and requirements.
Collaborate with cross-functional teams and security service providers to integrate security measures into IT systems and applications development and maintenance.
Manage incident response, escalation, and resolution for security breaches or incidents, including corrective and preventive measures.
Monitor and assess emerging cybersecurity threats, trends, and technologies, and recommend proactive risk mitigation measures.
Conduct security assessments, audits, and ongoing vulnerability management to identify risks and weaknesses in systems and processes.
Interface with external auditors, regulatory bodies, and customers on security and compliance matters as needed.