IT Compliance Manager

Job Summary

Seeking a full-time remote IT Compliance Manager, the successful candidate will manage the company's cybersecurity control program, oversee the performance of the managed service provider (MSP), and ensure compliance with security and data-handling requirements in a regulated transportation environment.

Key responsibilities

• Maintain and administer the company's control set mapped to NIST CSF 2.0 and oversee the Vanta GRC platform
• Manage the MSP relationship, including service delivery expectations, contract lifecycle, and performance monitoring
• Prepare for and coordinate evidence for security reviews, audits, and assessments while maintaining the enterprise risk register

Required qualifications

• Five or more years in IT compliance, information security, or IT audit, with at least two years managing a control program
• Hands-on experience with recognized security frameworks such as NIST CSF, ISO 27001, or SOC 2
• Experience administering a GRC or compliance automation platform like Vanta or similar
• Familiarity with core IT controls, including identity and access management and vulnerability management
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus