IT & Compliance Leader — SOC 2 & GovRAMP Ready

Facilities Management Express; United States; Hybrid; USD 110,000 - 130,000; Full time

Benefits offered by this job

Remote-friendly

Home office stipend

Company events

Competitive benefits

Job summary

FMX seeks an IT & Compliance Manager to lead IT operations and a robust compliance program. This remote-first role will be onsite at our Grandview Heights headquarters a few days each week, reporting to the CTO and managing the IT Specialist.

You will drive policy, enforce IT standards, and own the audit lifecycle for SOC 2 Type II and GovRAMP, while coordinating evidence, controls, and vendor risk across the organization.

Qualifications

• Minimum 3 years in IT support, systems administration, or IT compliance.
• At least 1 year in a lead, supervisory, or management role.
• Experience coordinating or supporting third-party audits (SOC 2 Type II).
• Strong experience with Windows, Active Directory, and Azure/M365 environments.
• Excellent organizational and project management skills.

Responsibilities

• Lead IT operations and compliance program across the org.
• Direct IT Specialist, including hiring and coaching.
• Oversee endpoint management and identity access controls.
• Lead SOC 2 Type II and GovRAMP audits from start to finish.
• Maintain policies, runbooks, and audit evidence collection.
• Collaborate with CTO on security posture and IT strategy.
• Respond to customer security inquiries and due-diligence requests.

Skills

IT leadership

Team leadership

Policy development

Public speaking

Incident response

Project management

Cross-functional collaboration

Education

CISA

CISSP

CompTIA Security+

Tools

Vanta

Drata

Secureframe

Defender for Endpoint

Azure VPN

Microsoft 365

Job description

FMX seeks an IT & Compliance Manager to lead IT operations and a robust compliance program. This remote-first role will be onsite at our Grandview Heights headquarters a few days each week, reporting to the CTO and managing the IT Specialist.

You will drive policy, enforce IT standards, and own the audit lifecycle for SOC 2 Type II and GovRAMP, while coordinating evidence, controls, and vendor risk across the organization.