IT and Compliance Manager

FMX; Columbus (OH); Hybrid; USD 110,000 - 140,000; Full time

Job summary

FMX is seeking an IT & Compliance Manager in Columbus, OH to lead our IT operations and compliance program. This hybrid, hands-on role supports a local team, oversees the IT Specialist, and drives SOC 2 and GovRAMP audits from start to finish.

You will define IT standards, enforce best practices, manage risk, and own incident response and documentation. Partner with the CTO on long-term security strategy while ensuring smooth IT onboarding, support, and cross-functional collaboration.

Qualifications

• Experience leading IT and compliance programs with audit scope.
• Track record in SOC 2 Type II and GovRAMP readiness.
• Proven ability to manage a technical team and coordinate cross-functionally.

Responsibilities

• Directly manage the IT Specialist including hiring, onboarding, performance reviews, and coaching.
• Define and enforce IT standards, policies and best practices across the organization.
• Own IT documentation, runbooks, and internal knowledge base.
• Oversee endpoint management, identity and access management, and security monitoring.
• Lead SOC 2 and GovRAMP audits from scoping to remediation and evidence collection.
• Maintain compliance platforms (e.g., Vanta) and map controls to SOC 2 / GovRAMP requirements.
• Partner with CTO on long-term IT strategy and security posture improvements.
• Support Sales/Customer Success with security questionnaires and due diligence.

Skills

Leadership

IT operations

Policy development

Audits management

Incident response

Cross-functional teamwork

Documentation

Communication skills

Project management

Security mindset

Tools

Active Directory

Azure AD

Microsoft 365

Defender for Endpoint

Vanta

Drata

Secureframe

Job description

Join us at FMX as our next IT & Compliance Manager! This role offers a flexible hybrid model, spending a few days a week on-site at our Grandview Heights HQ to provide hands on leadership for our local team.

You\'ll lead our IT operations and compliance program, managing our IT Specialist, setting IT standards across the organization, and leading our SOC 2 and GovRAMP audits. This is a player-coach role, ideal for someone equally comfortable shaping policy and rolling up their sleeves.

Team Leadership & IT Operations

• Directly manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching
• Set priorities and oversee the day to day IT support workload and ticket queue
• Define and enforce IT standards, policies, and best practices across the organization
• Own IT documentation, runbooks, and the internal knowledge base

Infrastructure & Security

• Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management
• Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems
• Monitor and respond to Microsoft Defender for Endpoint alerts, and lead incident response for IT related security events
• Manage software licensing, procurement, and vendor relationships
• Partner with the CTO on long term IT strategy, tooling decisions, and improvements to our security posture

Compliance & Audit Management

• Lead third-party SOC 2 (Type II) and GovRAMP audits from start to finish, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings
• Administer Vanta, FMX's compliance automation platform, including system integrations, automated control tests, control and policy ownership, and audit evidence collection
• Maintain FMX's control inventory, mapping IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements
• Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and required employee training
• Partner with Engineering, Product, HR, and other control owners to gather audit evidence and close gaps on schedule
• Draft, maintain, and annually review information security and compliance policies, and track employee policy acknowledgments
• Support Sales and Customer Success by responding to customer security questionnaires and due diligence requests
• Conduct risk assessments for third-party vendors and service providers that handle FMX or customer data

Employee Experience

• Deliver a smooth, well coordinated IT onboarding and offboarding experience for every FMX employee
• Serve as the escalation point for complex or unresolved IT issues
• Champion a service oriented IT culture that keeps employee satisfaction with IT support high

Requirements

• Minimum of 3 years of experience in IT support, systems administration, or IT compliance
• At least 1 year of experience in a lead, supervisory, or management role
• A proven track record of managing and developing technical team members
• Strong experience with Windows, Microsoft Active Directory, and Azure/Microsoft 365 environments
• Experience owning endpoint management at scale, including imaging, MDM, and patch management
• Hands on experience coordinating or supporting third-party compliance audits, ideally SOC 2 Type II
• Excellent organizational and project management skills, with a track record of driving cross functional work to on time completion
• Clear, collaborative communication skills, including the ability to explain technical concepts to non technical audiences
• A resourceful, solutions oriented mindset that focuses on finding a way forward rather than getting stuck on roadblocks
• Alignment with FMX's core pillars: a strong work ethic, discipline in our processes and responsibilities, coachability and openness to feedback, a results driven approach, and treating everyone with respect and integrity

Nice to Have

• Experience with GovRAMP (formerly StateRAMP), FedRAMP, or NIST SP 800-53 control frameworks
• Hands on experience with Vanta or a similar compliance automation platform, such as Drata or Secureframe
• Relevant certifications such as CISA, CISSP, or CompTIA Security+
• Familiarity with Google Workspace administration
• Experience with helpdesk ticketing systems