IT Compliance Manager

Job Summary

Seeking a full-time Manager, IT Compliance & Vendor Management, this role is responsible for building and overseeing the company's cybersecurity control program and managing the performance of the managed service provider (MSP) in a remote work environment.

Key responsibilities

• Maintain and oversee the company's control set mapped to NIST CSF 2.0, ensuring compliance with security and data-handling requirements
• Administer the Vanta GRC platform for control monitoring, evidence collection, and remediation tracking
• Manage the MSP relationship, including service delivery expectations, performance monitoring, and contract lifecycle management

Required qualifications

• Five or more years in IT compliance, information security, or IT audit, with at least two years managing a control program
• Hands-on experience with recognized security frameworks (NIST CSF, ISO 27001, SOC 2, etc.) and compliance automation platforms
• Experience overseeing outsourced IT providers, including service level monitoring and escalation management
• Ability to critically analyze SOC 2 Type II reports and other assurance artifacts
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus