IT Compliance Manager

Job Summary

Seeking a full-time Manager, IT Compliance & Vendor Management to oversee the company's cybersecurity control program and manage the performance of its managed service provider (MSP), ensuring compliance with NIST Cybersecurity Framework (CSF) 2.0 while working remotely from a major metro area in Canada or the United States.

Key responsibilities

• Maintain and monitor the company's control set mapped to NIST CSF 2.0 across all six functions
• Administer the Vanta GRC platform and manage the lifecycle of the MSP contract, including performance monitoring and service delivery expectations
• Prepare for and coordinate evidence for customer security reviews, audits, and assessments while maintaining the incident response plan

Required qualifications

• Five or more years of experience in IT compliance, information security, or IT audit, with at least two years managing a control program
• Hands-on experience with recognized security frameworks such as NIST CSF or ISO 27001
• Experience using GRC or compliance automation platforms like Vanta or Secureframe
• Working knowledge of core IT controls, including identity and access management and vulnerability management
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus