IT Compliance Manager

Job Summary

Seeking a full-time IT Compliance Manager, this role will manage the company's cybersecurity control program and oversee the performance of the managed service provider (MSP), ensuring compliance with the NIST Cybersecurity Framework (CSF) 2.0 while operating remotely from a major metro area in Canada or the United States.

Key responsibilities

• Maintain and administer the company's control set mapped to NIST CSF 2.0, including periodic control testing and documentation
• Serve as the primary relationship owner for the MSP, managing escalations, service delivery expectations, and monitoring contracted service levels
• Oversee the policy lifecycle, vendor intake and security review process, and maintain the enterprise risk register

Required qualifications

• Five or more years in IT compliance, information security, IT audit, or IT governance, with direct responsibility for a control program
• Hands-on experience with recognized security frameworks such as NIST CSF, NIST 800-53, or ISO 27001
• Experience administering a GRC or compliance automation platform like Vanta or Drata
• Working knowledge of core IT controls, including identity and access management and vulnerability management
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus