Remote IT Compliance & Vendor Management Lead

Tusk; United States; Remote; USD 120,000 - 175,000; Full time

Job summary

Landline is seeking a Manager, IT Compliance & Vendor Management to build and run its cybersecurity control program and oversee the MSP delivering day-to-day IT operations. This role ensures controls align with NIST CSF 2.0 and satisfy partner, regulator, and internal risk requirements.

You will manage policy lifecycle, risk registers, evidence collection, and security training while coordinating audits and vendor contracts across a remote-capable team.

Qualifications

• Five+ years in IT compliance, information security, IT audit, or IT governance with at least two years leading a control program.
• Hands-on experience with security frameworks (NIST CSF/NIST 800-53/ISO 27001/SOC 2/CIS Controls).
• Experience administering GRC or compliance automation platforms (Vanta, Drata, Secureframe, LogicGate, AuditBoard, ServiceNow GRC).
• Experience overseeing outsourced IT providers and SLAs.
• Knowledge of core IT controls: IAM, endpoint management, logging, vulnerability management, backup and change control.
• Ability to critically read SOC 2 Type II reports, noting scope and exceptions.
• Strong written communication for external-facing documentation.
• Direct NIST CSF 2.0 Govern experience is a strong plus.
• Exposure to regulated industries (transportation/aviation) is a plus.
• Familiarity with PCI DSS, CPRA, breach notification requirements.
• Contract negotiation experience with technology vendors or providers.
• ITIL foundation or equivalent service-management background.

Responsibilities

• Manage the cybersecurity control program mapped to NIST CSF 2.0 across six Functions.
• Administer the MSP relationship, including performance, escalations, and service delivery.
• Lead policy lifecycle: drafting, approvals, publication, and attestation tracking.
• Maintain the enterprise risk register and executive risk reporting.
• Coordinate evidence for customer security reviews, partner assessments, and external audits.
• Oversee security awareness training programs and phishing simulations.
• Ensure MSP-controlled controls function as contracted with evidence-based validation.
• Govern MSP access, joiner/moderator/leaver processes and access reviews.
• Maintain RACI for controls shared between Landline and MSP.
• Oversee vendor intake, security reviews, and data classification with review cadence.
• Collect and review third-party assurance artifacts (SOC 2 Type II, ISO 27001, pen tests).
• Track vendor security terms, breach obligations, and data processing agreements.
• Maintain incident response, business continuity, and disaster recovery documentation.
• Deliver recurring compliance and vendor performance reports to executives.

Skills

IT compliance

Information security

IT governance

Vendor management

Security controls

SOC 2/CSF reading

Written communication

NIST CSF governance

Regulated industries

Contract negotiation

ITIL basics

Education

CISA/CRISC/CISM/CISSP certification

ITIL foundation

Tools

Vanta

Drata

Secureframe

LogicGate

AuditBoard

ServiceNow GRC

Job description

Landline is seeking a Manager, IT Compliance & Vendor Management to build and run its cybersecurity control program and oversee the MSP delivering day-to-day IT operations. This role ensures controls align with NIST CSF 2.0 and satisfy partner, regulator, and internal risk requirements.

You will manage policy lifecycle, risk registers, evidence collection, and security training while coordinating audits and vendor contracts across a remote-capable team.