Remote IT Compliance & Vendor Management Leader

Butek Landline; South Bend (IN); Remote; USD 120,000 - 175,000; Full time

Benefits offered by this job

Comprehensive benefits and PTO

Flight benefit privileges

Discretionary PTO

Job summary

The Landline Company seeks a Manager, IT Compliance & Vendor Management to own the cybersecurity control program and MSP operations. You will design, operate and evidencing the program per NIST CSF 2.0, while ensuring regulated partner requirements and internal risk controls are met.

Remote eligibility in major metros in the US/Canada; extensive collaboration with airlines, airports and vendors will be part of daily responsibilities.

Qualifications

• 5+ years in IT compliance, information security, audit or governance
• Experience with recognized security frameworks (NIST CSF/800-53, ISO 27001, SOC 2)
• Experience administering a GRC or compliance platform
• Experience overseeing outsourced IT providers
• Ability to read SOC 2 Type II or similar reports critically
• Strong written communication skills

Responsibilities

• Maintain control sets mapped to NIST CSF 2.0 across six Functions
• Administer the GRC platform and evidence collection
• Lead policy lifecycle, attestations and risk register
• Coordinate customer security reviews and external audits
• Manage MSP relationship, SLAs, escalations and contract lifecycle
• Prepare periodic compliance and vendor performance reports
• Lead incident response planning and tabletop exercises
• Support procurement, legal and operations with security input

Skills

IT compliance

Information security

Security frameworks

GRC platforms

Vendor management

Communications

Education

CISA/CRISC/CISM/CISSP certification

Tools

Vanta

Drata

Secureframe

LogicGate

Job description

The Landline Company seeks a Manager, IT Compliance & Vendor Management to own the cybersecurity control program and MSP operations. You will design, operate and evidencing the program per NIST CSF 2.0, while ensuring regulated partner requirements and internal risk controls are met.

Remote eligibility in major metros in the US/Canada; extensive collaboration with airlines, airports and vendors will be part of daily responsibilities.