IT Compliance Manager

Job Summary

Seeking a full-time Manager, IT Compliance & Vendor Management, this role will manage the company's cybersecurity control program and oversee the performance of the managed service provider (MSP) while ensuring compliance with NIST Cybersecurity Framework (CSF) 2.0 in a remote work environment.

Key responsibilities

• Maintain and administer the company's control set mapped to NIST CSF 2.0 across all functions
• Serve as the primary relationship owner for the MSP, managing service delivery and performance monitoring
• Prepare evidence for customer security reviews, audits, and manage the policy lifecycle

Required qualifications

• Five or more years in IT compliance, information security, or IT governance, with experience in a control program
• Hands-on experience with recognized security frameworks such as NIST CSF or ISO 27001
• Experience with GRC or compliance automation platforms like Vanta or ServiceNow GRC
• Knowledge of core IT controls and ability to critically assess SOC 2 Type II reports
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus