IT Compliance Manager

Job Summary

Seeking a full-time remote IT Compliance Manager, this role will manage the cybersecurity control program, oversee the managed service provider (MSP) for IT operations, and ensure compliance with the NIST Cybersecurity Framework (CSF) 2.0 while addressing regulatory requirements in a transportation environment.

Key responsibilities

• Maintain and administer the company's control set mapped to NIST CSF 2.0 across all functions
• Oversee the MSP's performance, managing service levels, escalations, and contractual obligations
• Prepare documentation and evidence for security reviews, audits, and compliance assessments

Required qualifications

• Five or more years in IT compliance, information security, or IT audit, with experience in managing a control program
• Hands-on experience with security frameworks such as NIST CSF, ISO 27001, or SOC 2
• Experience using GRC or compliance automation platforms like Vanta or equivalent
• Knowledge of core IT controls including identity management and vulnerability management
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus