Remote IT Compliance & MSP Vendor Manager

Butek Landline; Boston (MA); Remote; USD 120,000 - 175,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k)

Parental leave

Flight benefits

Discretionary PTO

Job summary

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to build and run its cybersecurity control program and oversee the MSP delivering day-to-day IT operations. This role owns two connected accountabilities: MSP performance and the design, operation, and evidencing of the CSF 2.0 control program.

Landline operates in a regulated transportation environment and contracts with airline partners and airports; the role ensures obligations and internal risk requirements are met

Qualifications

• Five or more years in IT compliance, information security, IT audit, or IT governance with control/audit responsibility
• Hands-on experience with security frameworks (NIST CSF, NIST 800-53, ISO 27001, SOC 2)
• Experience administering a GRC/compliance automation platform (Vanta, Drata, Secureframe, LogicGate)

Responsibilities

• Maintain the control set mapped to NIST CSF 2.0 across all six Functions: Govern, Identify, Protect, Detect, Respond, and Recover
• Administer the Vanta GRC platform, including integrations, control monitoring, evidence collection, automated tests, and remediation tracking
• Perform periodic control testing and design effectiveness reviews; document results and drive remediation
• Own policy lifecycle: drafting, review, routing, publication, attestation tracking
• Maintain the enterprise risk register, including risk scoring and executive reporting
• Coordinate evidence for customer security reviews, airline partner assessments, and audits
• Administer security awareness training, including phishing simulations and tracking
• Serve as primary relationship owner for MSP; manage escalations and service delivery expectations
• Monitor and report on contracted SLAs; document breaches and drive root-cause analysis
• Chair quarterly MSP business reviews, set agendas, track commitments, and maintain action logs
• Own MSP contract lifecycle: scope changes, renewals, pricing, exit/transition plans
• Verify MSP controls function as contracted with evidence-based validation
• Govern MSP access administration and periodic access certification
• Maintain RACI for MSP vs Landline controls and shared controls
• Operate vendor intake/review process for new technology purchases
• Maintain vendor inventory with data classification and review cadence
• Collect and review third-party assurance artifacts (SOC 2 Type II, ISO 27001)
• Track vendor security terms, breach notifications, and data processing agreements
• Maintain incident response plan and annual tabletop exercise
• Lead compliance during security incidents with evidence preservation and reporting
• Maintain business continuity and disaster recovery documentation with MSP coordination
• Deliver recurring compliance/vendor performance reports to leadership
• Provide security/compliance input to procurement, legal, and ops
• Track and report program metrics

Skills

IT compliance

Information security

Vendor management

NIST CSF 2.0

SOC 2

GRC platforms

Written communication

Tools

Vanta

AuditBoard

Drata

LogicGate

ServiceNow GRC

Job description

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to build and run its cybersecurity control program and oversee the MSP delivering day-to-day IT operations. This role owns two connected accountabilities: MSP performance and the design, operation, and evidencing of the CSF 2.0 control program.

Landline operates in a regulated transportation environment and contracts with airline partners and airports; the role ensures obligations and internal risk requirements are met