IT Compliance Manager

Job Description

Job Description

Salary to be discussed at interview.

Relocation package is available to qualified candidate.

IT & Compliance Manager Overview

High-level day-to-day, monthly, operational, compliance, infrastructure, and business automation responsibilities

Oversee IT operations, infrastructure, cybersecurity, compliance, business systems, custom programs, automations, and support for a multi-location automotive group with 13 locations, over 1 ,200 employees, and approximately 2,500 network-connected devices.

High-Level Role Overview

0 Lead technology operations, infrastructure, security, compliance, and IT support across a multi-location automotive environment.

Maintain availability, security, and reliability for business-critical dealership systems and applications.

Provide strategic IT planning while remaining involved in operational support, escalations, vendor coordination, and implementation work.

Build, structure, and improve IT department processes, standards, documentation, and service delivery.

Support dealership growth by aligning technology decisions with business operations, compliance requirements, and long-term scalability.

IT Operations and Support Leadership

e Oversee daily IT support operations and helpdesk service delivery.

Prioritize support requests, escalations, outages, and store-impacting issues.

Lead, train, and support internal IT staff while assigning tasks and monitoring workload.

e Manage onboarding, offboarding, access changes, account requests, and equipment needs.

0 Support dealership departments including sales, service, accounting, administration, and leadership. Maintain standards for workstations, laptops, phones, printers, mobile devices, and dealership technology. Improve ticketing workflows, response processes, escalation paths, and support documentation.

Infrastructure and Network Management

Manage network infrastructure across 13 locations, including switches, firewalls, wireless networks, VPNs, and internet connectivity.

Maintain servers, cloud systems, endpoints, and core business technology platforms.

0 Monitor system availability, network performance, outages, and recurring infrastructure issues.

0 Plan and coordinate upgrades, replacements, and improvements for aging hardware and systems.

0 Support business-critical applications, vendor platforms, and dealership operating systems.

0 Design, restructure, and improve network environments to support reliability, security, and application performance. Maintain network documentation, diagrams, configurations, inventories, and standards.

Cybersecurity and Risk Management

Manage cybersecurity controls designed to protect company systems, customer data, employee data, and dealership operations.

Review and improve access controls, permissions, account security, and authentication standards.

0 Support MFA, password policies, endpoint protection, email security, and secure remote access. 0 Review security alerts, suspicious activity, endpoint status, and potential vulnerabilities.

0 Manage vendor access, third-party risks, and security expectations for outside service providers.

Maintain incident response procedures and support investigation, containment, documentation, and remediation activities.

0 Promote security awareness and strengthen internal security practices across the organization.

Compliance Management

0 Manage IT compliance responsibilities related to GLBA, PCI, and other regulatory or business requirements.

Develop, update, and maintain IT policies, procedures, standards, and compliance documentation. Gather evidence for audits, assessments, vendor reviews, and leadership reporting.

0 Track compliance gaps, remediation tasks, risk items, and required control improvements.

Support risk assessments, written information security program requirements, and safeguard documentation.

0 Coordinate with vendors, auditors, consultants, and leadership on compliance initiatives.

Ensure implemented security controls are documented, reviewed, and aligned with business and regulatory expectations.

Microsoft 365, Cloud, and Systems Administration

Administer Microsoft 365 services including user accounts, mailboxes, Teams, SharePoint, OneDrive, and related settings.

Manage identity, access, licensing, groups, permissions, and security settings across cloud platforms.

Support Azure-related identity, authentication, conditional access, and administrative functions.

Maintain email security, retention settings, collaboration tools, and productivity systems.

Support AWS or other cloud-based systems when required by business operations.

Troubleshoot cloud service issues, user access problems, synchronization issues, and application integrations. Implement cloud administration standards that support security, compliance, and operational efficiency.

Custom Business Programs and Automations

0 Develop, update, and maintain custom business programs that improve operational efficiency and reduce manual work.

Build and support automations for IT workflows, dealership processes, reporting, ticketing, onboarding, offboarding, and system administration.

Create scripts, integrations, and tools that connect internal systems, vendor platforms, APIs, databases, and business applications.

Maintain custom automations to ensure reliability, security, error handling, and compatibility with changing business requirements.

0 Document custom tools, automation logic, configuration requirements, dependencies, and support procedures. Troubleshoot automation failures, API errors, data issues, and workflow interruptions.

0 Identify repetitive business processes that can be streamlined through automation, scripting, or custom application development.

Improve internal productivity by replacing manual steps with repeatable, auditable, and scalable technology solutions.

Project Management and Implementation

Manage IT projects from planning through completion, including scoping, scheduling, implementation, testing, and follow-up.

0 Coordinate infrastructure upgrades, store installations, system deployments, and technology rollouts.

0 Work with vendors, leadership, store managers, and internal staff to complete projects with minimal disruption.

0 Develop project timelines, implementation plans, technical requirements, and communication updates.

Validate systems before go-live and confirm that deployments meet operational, security, and compliance needs.

0 Track project risks, blockers, dependencies, and post-implementation issues.

Ensure technology projects support business continuity, scalability, security, and dealership operations.

Vendor and Application Management

Manage relationships with vendors supporting dealership systems, phones, internet, cybersecurity, compliance, hardware, and software.

Coordinate vendor support requests, escalations, service issues, renewals, and implementation work. 0 Review service levels, contracts, licensing, costs, and upcoming technology needs.

Evaluate new tools, platforms, and services for operational fit, security, compliance, and cost effectiveness.

Ensure vendor solutions align with dealership requirements and internal technology standards.

Support application integrations, vendor portals, dealership platforms, and system access requirements.

0 Maintain awareness of vendor dependencies and risks that could affect business operations.

Policy, Documentation, and Process Development

Create, update, and maintain IT policies, procedures, standards, and internal documentation.

0 Document onboarding, termination, access management, asset handling, support workflows, and escalation procedures.

Maintain inventories for equipment, systems, software, licensing, network assets, and business technology.

0 Develop repeatable processes that improve consistency, accountability, compliance, and service quality.

0 Maintain audit-ready documentation for compliance reviews, vendor assessments, and internal governance.

Prepare internal communication materials and technology updates, including Tech Corner newsletter content.

Continuously improve internal IT processes based on ticket trends, incidents, audits, and business feedback.

Day-to-Day Overview

Review helpdesk tickets, escalations, outages, and urgent support needs.

0 Prioritize store-impacting issues and coordinate immediate response when systems affect business operations.

0 Support network, phone, printer, workstation, application, email, and access-related issues.

0 Manage account requests, permissions, onboarding, terminations, and user access changes. 0 Review Microsoft 365, Azure, endpoint, email security, and cloud administration items.

Monitor cybersecurity alerts, suspicious activity, system health, and potential vulnerabilities.

Coordinate with vendors on open support cases, service requests, installations, and escalations. 0 Guide IT staff through troubleshooting, project tasks, support requests, and technical decisions. 0 Communicate with store leadership, department managers, vendors, and executives as needed.

Update documentation, procedures, inventories, and project notes as work is completed.

Develop, maintain, or troubleshoot custom scripts, business programs, integrations, and automations.

Monthly Overview

Review ticket trends, recurring issues, support performance, and opportunities for process improvement.

Evaluate system uptime, outages, network stability, vendor performance, and infrastructure reliability.

0 Review security alerts, endpoint status, access controls, user permissions, and terminated account cleanup.

Audit licensing, subscriptions, accounts, devices, assets, and software usage.

Review GLBA, PCI, risk management, policy, and compliance-related tasks.

0 Update policies, procedures, audit evidence, risk tracking, and compliance documentation.

0 Meet with vendors to review service concerns, renewals, future needs, and ongoing projects.

Plan hardware replacements, infrastructure upgrades, store projects, software changes, and security improvements.

0 Review IT costs, technology budgets, purchasing needs, and upcoming renewals.

0 Provide updates to leadership on major IT initiatives, risks, compliance items, and operational priorities.

0 Review backup, disaster recovery, incident response, and business continuity readiness.

0 Review custom business programs, scripts, integrations, and automations for maintenance needs, errors, and improvement opportunities.

Prepare or publish internal communications, training reminders, and technology updates.

REQUIREMENTS:

• EXPERIENCE WITH THE AUTOMOTIVE DEALERSHIP INDUSTRY
• MUST BE PROFICIENT IN CDK SOFTWARE
• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, Business Administration, or related field preferred.
• Equivalent combination of education and experience may be considered.
• 5+ years of progressive IT management experience.
• 3+ years of supervisory or leadership experience.
• Experience managing multi-site technology environments.
• Experience with regulatory compliance, cybersecurity, risk management, and audit processes.
• Strong understanding of network infrastructure, cloud technologies, cybersecurity frameworks, and system administration.
• Knowledge of FTC Safeguards Rule, data privacy requirements, and information security best practices.
• Excellent project management and organizational skills.
• ISC2 CISSP Certification is preferred.