IT Compliance Manager

Job Summary

Seeking a full-time remote IT Compliance Manager, the successful candidate will manage the cybersecurity control program and oversee the performance of the managed service provider (MSP), ensuring compliance with NIST Cybersecurity Framework (CSF) 2.0 and meeting regulatory obligations in a transportation environment.

Key responsibilities

• Maintain and administer the company's cybersecurity control set aligned with NIST CSF 2.0
• Manage the relationship with the MSP, including service delivery expectations and performance monitoring
• Oversee the policy lifecycle, including drafting, approval, and compliance tracking

Required qualifications

• Five or more years of experience in IT compliance, information security, or IT governance
• Hands-on experience with recognized security frameworks such as NIST CSF or ISO 27001
• Experience with GRC or compliance automation platforms like Vanta or ServiceNow GRC
• Knowledge of core IT controls including identity and access management and vulnerability management
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus