IT Information Security Manager

What we are looking for:

At Aldridge Electric, we build and maintain the critical infrastructure that powers the nation. As our Information Security Manager , you are the architect of our digital trust and the leader of our frontline defense. You will bridge the gap between complex regulatory requirements and the technical reality of modern electrical construction.

In this role, our "Nobody Gets Hurt" safety philosophy extends into the digital realm. You will lead a team of IT Security Analysts, manage our world-class security stack, and spearhead our journey toward CMMC 2.0 Level 2 certification, securing our "license to operate" on the nation's most sensitive infrastructure projects.

What you'll do:

Team Leadership & Mentorship

Direct Management: Lead, mentor, and develop a team of IT Security Analysts, fostering a culture of continuous learning and technical excellence.

Resource Allocation: Manage the team's daily priorities, balancing long-term compliance projects with immediate security operational needs.

Professional Development: Define career paths and training goals for team members to ensure the department stays ahead of evolving cyber threats.

Security Operations & Technical Oversight

Managed SOC Integration: Serve as the primary technical liaison and escalation point for our SOC-as-a-Service provider. Review managed alerts, tune log sources, and lead incident response efforts.

Endpoint Protection: Own the technical administration and strategy for our EDR platform, ensuring 100% coverage, optimized sensor policies, and rapid threat hunting capabilities.

Incident Response: Lead the internal SIRT (Security Incident Response Team), translating SOC alerts into actionable remediation steps for the broader IT team.

CMMC 2.0 & Federal Compliance Leadership

Certification Roadmap: Lead the organization through the transition from Phase 1 self-attestation to Phase 2 (C3PAO) Certification to meet the November 2026 mandate.

CUI Boundary Management: Define and manage the scope of Controlled Unclassified Information (CUI) throughout the project lifecycle-from bidding to final field implementation.

SPRS & Documentation: Maintain ownership of Aldridge's score in the Supplier Performance Risk System (SPRS) . Update the System Security Plan (SSP) and Plan of Action and Milestones (POA&M) regularly.

Enterprise Risk & Policy

Risk Register: Maintain the Enterprise Cybersecurity Risk Register, quantifying risks for executive stakeholders.

Third-Party Risk (TPRM): Oversee the security vetting process for subcontractors and vendors, ensuring they meet the required security standards for project participation.

Policy Enforcement: Develop and enforce internal security policies that balance high-security requirements with the operational speed required in the construction industry.

Who you are:

Required Experience

Leadership: 3+ years of experience managing or leading IT security professionals.

Compliance: Proven experience leading an organization through a major cybersecurity assessment (CMMC, NIST 800-171, ISO 27001, or SOC2).

Cybersecurity Breadth: 7+ years of total experience in Information Security with a strong foundation in both GRC and technical operations.

Technical Proficiencies

EDR Expert: Hands-on experience managing Enterprise Detection and Response tools.

SOC Operations: Experience working with Managed Security Service Providers (MSSP) or SOC environments.

Framework Mastery: Deep understanding of NIST CSF and NIST 800-171.

Infrastructure: Familiarity with securing O365 environments, cloud infrastructure, and ideally, Operational Technology (OT) found in utility environments.

Education & Certifications

Certifications: One or more of the following are required : CISSP, CISM, or CISA.

Education: Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field.

Who we are:

At Aldridge, we invite you to be a part of our dynamic team, where your skills are not only valued but crucial to our success. As we pursue our vision to be the First Choice for Energy and Transportation infrastructure projects, we welcome fresh perspectives and prioritize teamwork to drive our industry-leading safety, innovation, and execution.

Our culture is rooted in family-centeredness, with third-generation leadership guiding our unwavering spirit of innovation and entrepreneurship. With over 2,000 industry experts dedicated to our vision, we actively contribute to and uplift the communities impacted by our infrastructure projects and our Aldridge family.

Built on collaboration and a commitment to mental wellness, our core values create an unparalleled sense of unity and camaraderie within our organization. Through team-building events, open-door policies, and visible executive presence, we foster an environment where everyone can thrive, innovate, and make a meaningful difference. Join us in building the infrastructure that keeps the world moving and connected - become a part of the A-team to start building and strengthening your career today!

What we offer:

The annual base pay for this role is between $110,000.00 - $140,000.00. The actual pay is dependent upon many factors, including: location, work experience, education, training, transferable skills, business needs, and market conditions. The base pay range is subject to change and may be modified in the future. The role may also be eligible for a bonus. Aldridge provides a comprehensive benefits package that includes the following:

Health Insurance

Dental Insurance

Vision Insurance

Wellness Incentive Programs

Short and Long Term Disability

Flexible Spending Accounts

Life Insurance

Legal Assistance

Identity Protection

Accident & Critical Illness Insurance

Company 401(k) Matching Contributions

Paid Time Off (PTO)

Employee Assistance Program (EAP)

This job-specific task list covers only the most important job duties. Employees assigned to this position title will also perform other occasional work assignments not mentioned above, including temporary assignments, training assignments, and other related duties. Aldridge is an EEO Employer and will recruit, hire, train, and promote people in all job classifications without regard to race, color, national origin, age, religion, disability status, gender, sexual orientation, gender identity, genetic information, veteran status, marital status, or any other characteristic protected by law.

Aldridge

New Jobs

IT Information Security Manager