IT Compliance Manager

Job Summary

Seeking a full-time salaried IT Compliance Manager, this role will manage the company's cybersecurity control program and oversee the performance of the managed service provider (MSP) responsible for day-to-day IT operations, all while working remotely from a major metro area in Canada or the United States.

Key responsibilities

• Maintain the company's control set mapped to NIST CSF 2.0 and administer the Vanta GRC platform for control monitoring and evidence collection
• Perform periodic control testing, document results, and drive remediation efforts while managing the MSP relationship and service delivery expectations
• Oversee the policy lifecycle, maintain the enterprise risk register, and prepare evidence for customer security reviews and external audits

Required qualifications

• Five or more years in IT compliance, information security, or IT governance, with at least two years managing a control program
• Hands-on experience with recognized security frameworks (e.g., NIST CSF, ISO 27001) and compliance automation platforms (e.g., Vanta, ServiceNow GRC)
• Experience managing outsourced IT providers, including service level monitoring and escalation
• Ability to critically read SOC 2 Type II reports and familiarity with regulatory requirements like PCI DSS or CCPA/CPRA
• Professional certifications such as CISA, CRISC, CISM, or CISSP are a plus