Remote IT Compliance & MSP Vendor Manager

Butek Landline; Fallsington (Bucks County); Remote; USD 120,000 - 175,000; Full time

Benefits offered by this job

Comprehensive benefits and PTO

Flight benefit privileges with airline

Discretionary PTO

Job summary

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to lead the cybersecurity control program and oversee the MSP delivering day-to-day IT operations. This role ensures controls meet NIST CSF 2.0 requirements and satisfies partner, regulatory, and internal risk obligations.

Remote in a major North American metro with travel as needed. Compensation ranges reflect a senior leadership level in IT compliance and vendor governance.

Qualifications

• 5+ years in IT compliance, information security, IT audit, or IT governance with direct control/audit experience.
• Experience implementing/operating security frameworks (NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Controls).
• Experience using GRC/compliance automation platforms (Vanta, Drata, Secureframe, LogicGate, AuditBoard, ServiceNow GRC).
• Experience managing outsourced IT providers and SLA oversight.
• Working knowledge of core IT controls: IAM, endpoint management, logging, vulnerability management, backup & recovery, change management.
• Ability to read SOC 2 Type II reports critically (scope, exceptions, COCs).
• Strong written communication for external audiences.
• CISA/CRISC/CISM/CISSP is a plus.
• NIST CSF 2.0 Govern function & supply chain risk mgmt is a plus.
• Experience in transportation/regulatory industries is a plus.
• ITIL foundation or equivalent service management background is a plus.
• Contract negotiation experience with vendors is a plus.

Responsibilities

• Maintain controls mapped to NIST CSF 2.0 across Govern, Identify, Protect, Detect, Respond, Recover.
• Administer GRC platforms including integrations, evidence collection and remediation tracking.
• Conduct periodic control testing and document results with owners and due dates.
• Own policy lifecycle: drafting, review, publication, attestation tracking.
• Maintain enterprise risk register and executive reporting.
• Coordinate evidence for customer/security reviews and external audits.
• Oversee security awareness training and phishing simulations.
• Manage MSP relationship, escalations and service delivery expectations.
• Monitor service levels, document breaches and drive root-cause analysis.
• Chair quarterly MSP business reviews and manage MSP contracts lifecycle.

Skills

IT compliance

Information security

IT governance

Written communication

Contract negotiation

Education

CISA/CRISC/CISM/CISSP (cert)

Tools

Vanta

Drata

Secureframe

LogicGate

AuditBoard

ServiceNow GRC

Job description

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to lead the cybersecurity control program and oversee the MSP delivering day-to-day IT operations. This role ensures controls meet NIST CSF 2.0 requirements and satisfies partner, regulatory, and internal risk obligations.

Remote in a major North American metro with travel as needed. Compensation ranges reflect a senior leadership level in IT compliance and vendor governance.