IT Compliance Manager

Job Summary

Seeking a full-time Manager, IT Compliance & Vendor Management, this role will manage the company's cybersecurity control program and oversee the managed service provider (MSP) for daily IT operations, ensuring compliance with NIST Cybersecurity Framework (CSF) 2.0 while working remotely from a major metro area in Canada or the United States.

Key responsibilities

• Maintain the company's control set mapped to NIST CSF 2.0 and administer the Vanta GRC platform for control monitoring and evidence collection
• Manage the relationship with the MSP, including service delivery expectations, performance monitoring, and contract lifecycle management
• Prepare evidence for security reviews and audits, and serve as compliance lead during security incidents

Required qualifications

• Five or more years in IT compliance, information security, or IT governance, with direct responsibility for a control program
• Hands-on experience with recognized security frameworks such as NIST CSF, ISO 27001, or SOC 2
• Experience administering a GRC or compliance automation platform like Vanta or equivalent
• Knowledge of core IT controls including identity and access management and vulnerability management
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus