{"id":3214506,"url":"https://alion.io/job/dudek-security-and-compliance-manager","title":"Security and Compliance Manager","company":{"id":2349540,"name":"Dudek","domain":"dudek.com","url":"https://alion.io/company/dudek-com","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Management","role_family":"Management","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":115000,"max":135000,"currency":"USD","period":"year","gross":null,"usd_annual":135000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"NIST CSF","optional":false}],"status":"live","first_seen_at":"2026-10-24T17:31:10Z","employer_posted_date":null,"last_verified_at":"2026-10-24T17:31:10Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"OverviewLocation(s): Remote, USAWork Environment: Hybrid/RemoteCompensation: $115,000–$135,000 annually*\nDudek’s journey began in 1980 with a vision to serve Southern California’s water and wastewater agencies. \nToday, we are a 100% employee-owned firm supporting clients nationwide and delivering projects that improve and protect the built and natural environments of communities throughout the United States. Our work has been recognized by leading industry organizations, and we’ve been honored with multiple national Top Workplace Awards. \nOur employee-owners are unified by a singular commitment to supporting projects that address key societal issues, such as the transition to renewable energy, infrastructure hardening and repair, environmental protection, and community resilience. \nLearn more about our award-winning culture, the benefits and perks of being a Dudekian, and the projects you will have the opportunity to shape. \nPosition OverviewWho You AreAs an employee-owner, you embrace accountability, working safely, and collaboration while thinking resourcefully and independently.\nLike all Dudekians, you are curious and solution-oriented, with the ability to adapt quickly to changes and approach challenges with a spirit of innovation.\nHow You’ll Make an Impact As a Security & Compliance Manager, you'll be responsible for overseeing Dudek's cybersecurity operations, managing security service providers, and ensuring the protection of company systems, technology, and sensitive data. You'll play a key role in identifying and mitigating security risks, strengthening security controls, and supporting compliance with applicable regulatory and contractual requirements.\nThis is a hands-on leadership opportunity for a cybersecurity professional who brings strong technical expertise and a practical, risk-based approach to information security. You'll collaborate with internal teams and external partners to maintain effective security operations while supporting Dudek's business objectives.\nThis role is part of our Information Technology (IT) department and reports directly to the Chief Information Officer (CIO).\nDuties and Responsibilities \nPartnering with the CIO and business leaders responsible for ensuring the security, compliance, and risk management of the company technology and data portfolio in concert with legal, regulatory, and contractual commitments.\n\nResponsible for identifying and acting on opportunities for process improvement, process mapping and related documentation, communication of new processes to applicable stakeholders and identification of appropriate automation and process technology to support further improvements.\n\nManaging the relationship and ongoing coordination of managed service security providers (MSSP’s).\n\nManage IT controls program to ensure the ongoing operational effectiveness, review, and auditing of a core set of internal controls.\n\nLead efforts to ensure IT compliance with industry (e.g., local, state, federal) and contractual regulations & requirements.\n\nCollaborate with cross-functional teams and security service providers to integrate security measures into the development and maintenance of IT systems and applications.\n\nManage incident response, escalation, and resolution for security breaches or incidents, implementing corrective actions and preventive measures.\n\nProactively monitor and assess emerging threats, trends, and technologies in the cybersecurity landscape and recommend proactive measures to mitigate risks.\n\nConduct regular security assessments, audits, and ongoing vulnerability management operations to identify potential risks and weaknesses in systems and processes.\n\nInterface with external auditors, regulatory bodies, and customers, as necessary, on security and compliance matters.\n\nMinimum Qualifications \nBachelor's degree in Computer Science, Information Technology, or related field; relevant certifications (e.g., CISSP, CISM, CISA) preferred.\n\nProven experience in internal controls, information security, risk management, and compliance roles.\n\nExperience leading and conducting IT audits and remediation activities.\n\nStrong knowledge of security frameworks (e.g., NIST CSF), security standards (e.g. 800-53, 800-171), and industry best practices.\n\nExperience working with CMMC Level 2 compliant environments.\n\nProficiency in conducting security assessments, vulnerability management operations, and implementing security controls.\n\nExperience with cloud security service providers, tools, and technologies.\n\nStrong analytical and analysis capabilities and related communications.\n\nAbility to work effectively in a collaborative team environment and manage multiple priorities.\n\nPreferred Qualifications Relevant certifications (e.g., CISSP, CISM, CISA), as identified in the original qualifications.\n\nCompensation: $115,000–$135,000 annually*\n*Final agreed-upon compensation will be based on a variety of factors including, but not limited to, an individual’s related experience, education, certifications, skills, and work location. Successful candidates must pass a pre-employment drug test and background check prior to beginning employment. \nWorking Conditions This job operates in a remote or office-based environment and this role routinely uses standard office equipment such as computers, phones, printers, etc. \nPhysical Requirements The physical demands described here are representative of those that must be met to successfully perform the essential functions of the job. This job requires the following: \nWorking on a computer, sitting, or standing for long periods of time in an office or remote office setting. \n\nAttending meetings, both in person and virtually, and speaking on the phone with peers, clients, etc. \n\nSpecific vision abilities, including close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus. \n\nConnect with us!\n💼LinkedIn\n📸Instagram\n▶️YouTube\n\n🤝Dudek Talent Community\nDudek is committed to creating a workplace where all employees, regardless of their background, feel valued, respected, and have equal opportunities to succeed. We believe that a diverse and inclusive workforce is essential to our business success, and we are dedicated to fostering a culture where everyone can thrive. We are committed to fair and equitable processes, based on merit, free from any discrimination. \nDudek is genuinely committed to equal employment opportunities within our company and on our project teams. Dudek is also committed to compliance with all applicable laws providing equal employment opportunities. This commitment applies to all persons involved in Dudek’s operations and prohibits unlawful discrimination by any employee of Dudek, including supervisors and coworkers. Equal employment opportunities will be extended to all persons (including those with disability and veteran status) in all aspects of the employment relationship, including recruitment, hiring, training, promotion, transfer, compensation, benefits, discipline, layoff, recall, and termination. Any employee who violates this policy and Dudek’s commitment to equal employment opportunities will be subject to disciplinary action. \nDudek is a U.S.-based employer. All positions are based in the United States and require U.S. work authorization. \nOriginally posted on Himalayas","description_format":"text","description_chars":7359,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-24T20:28:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":10,"reasons":["seen:1","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":135000,"is_top_pay":true},"html_url":"https://alion.io/job/dudek-security-and-compliance-manager","json_url":"https://alion.io/job/dudek-security-and-compliance-manager.json","meta":{"generated_at":"2026-10-26T20:01:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":64,"day_limit":5000,"remaining_today":4936,"minute_limit":60,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2349540},"rest":"https://alion.io/mcp/rest/get_company?id=2349540"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdudek-security-and-compliance-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdudek-security-and-compliance-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdudek-security-and-compliance-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dudek-security-and-compliance-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdudek-security-and-compliance-manager"}]}