IT Compliance Manager

Seeking a full-time salaried IT Compliance Manager, this role will manage the company's cybersecurity control program and oversee the performance of the managed service provider (MSP) responsible for day-to-day IT operations, all while working remotely from a major metro area in Canada or the United States. Key responsibilities Maintain the company's control set mapped to NIST CSF 2.0 and administer the Vanta GRC platform for control monitoring and evidence collection Perform periodic control testing, document results, and drive remediation efforts while managing the MSP relationship and service delivery expectations Oversee the policy lifecycle, maintain the enterprise risk register, and prepare evidence for customer security reviews and external audits Required qualifications Five or more years in IT compliance, information security, or IT governance, with at least two years managing a control program Hands-on experience with recognized security frameworks (e.g., NIST CSF, ISO 27001) and compliance automation platforms (e.g., Vanta, ServiceNow GRC) Experience managing outsourced IT providers, including service level monitoring and escalation Ability to critically read SOC 2 Type II reports and familiarity with regulatory requirements like PCI DSS or CCPA/CPRA Professional certifications such as CISA, CRISC, CISM, or CISSP are a plus