IT Compliance Manager

Job Summary

Seeking a full-time Manager, IT Compliance & Vendor Management to oversee the cybersecurity control program and manage the performance of the managed service provider (MSP) while working remotely from a major metro area in Canada or the United States.

Key responsibilities

• Maintain and administer the company's control set mapped to NIST CSF 2.0, including control testing and policy lifecycle management
• Serve as the primary relationship owner for the MSP, managing service delivery, escalations, and contractual obligations
• Prepare evidence for security reviews and audits, while maintaining the enterprise risk register and incident response plan

Required qualifications

• Five or more years in IT compliance, information security, IT audit, or IT governance, with experience in managing a control program
• Hands-on experience with a recognized security framework (e.g., NIST CSF, ISO 27001) and compliance automation platforms (e.g., Vanta)
• Experience managing outsourced IT providers, including service level monitoring and escalation processes
• Ability to critically evaluate SOC 2 Type II reports and other third-party assurance artifacts
• Professional certification such as CISA, CRISC, CISM, or CISSP is a plus