IT Compliance Manager

Job Summary

To oversee the company's cybersecurity control program and manage the performance of its managed service provider, the full-time remote IT Compliance Manager will maintain compliance with the NIST Cybersecurity Framework, administer the Vanta GRC platform, and ensure adherence to security requirements from airline partners and regulatory bodies.

Key responsibilities

• Maintain the company's control set mapped to NIST CSF 2.0 and perform periodic control testing
• Administer the Vanta GRC platform, including control monitoring and evidence collection
• Manage the relationship with the managed service provider, ensuring service delivery and compliance with contractual obligations

Required qualifications

• Five or more years in IT compliance, information security, or IT audit, with experience in managing a control program
• Hands-on experience with recognized security frameworks such as NIST CSF or ISO 27001
• Experience administering a GRC or compliance automation platform
• Knowledge of core IT controls, including identity and access management and vulnerability management
• Professional certifications such as CISA, CRISC, CISM, or CISSP are a plus