IT Compliance Manager

Job Summary

Seeking a full-time remote IT Compliance Manager, the candidate will manage the company's cybersecurity control program and oversee the performance of the managed service provider (MSP), ensuring compliance with regulatory requirements and the NIST Cybersecurity Framework (CSF) 2.0.

Key responsibilities

• Maintain and administer the company's control set mapped to NIST CSF 2.0, including control testing and policy lifecycle management
• Serve as the primary relationship owner for the MSP, managing service delivery expectations and monitoring contracted service levels
• Prepare evidence for security reviews and audits, and deliver recurring compliance and vendor performance reports to executive leadership

Required qualifications

• Five or more years in IT compliance, information security, IT audit, or IT governance, with at least two years managing a control program
• Hands-on experience with recognized security frameworks (NIST CSF, ISO 27001, SOC 2, etc.) and compliance automation platforms
• Experience managing outsourced IT providers, including service level monitoring and escalation
• Ability to critically read SOC 2 Type II reports and analyze third-party assurance artifacts
• Professional certifications such as CISA, CRISC, CISM, or CISSP are a plus