IT Compliance Manager

Job Summary

Seeking a full-time remote IT Compliance Manager, the role will manage the company's cybersecurity control program, oversee the performance of a managed service provider, and ensure compliance with the NIST Cybersecurity Framework (CSF) 2.0 while meeting regulatory requirements in a transportation environment.

Key responsibilities

• Maintain and administer the company's control set mapped to NIST CSF 2.0 across all six functions
• Manage the relationship with the managed service provider, including service delivery expectations and performance monitoring
• Prepare and coordinate evidence for security reviews, audits, and assessments while maintaining the enterprise risk register

Required qualifications

• Five or more years in IT compliance, information security, IT audit, or IT governance, with at least two years in a control program or audit function
• Hands-on experience with security frameworks such as NIST CSF, ISO 27001, or SOC 2
• Experience with GRC or compliance automation platforms like Vanta or ServiceNow GRC
• Proven ability to manage or oversee outsourced IT providers, including service level monitoring
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus