Remote IT Compliance & Vendor Management Manager

Butek Landline; New Castle (DE); Remote; USD 120,000 - 175,000; Full time

Benefits offered by this job

Comprehensive benefits

Flight benefit privileges

Discretionary PTO

Job summary

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to design, operate, and evidence the company’s control program against NIST CSF 2.0. This role also oversees the MSP delivering day-to-day IT operations and ensures compliance with partner and regulatory requirements.

Remote-friendly employer with a focus on governance, risk, and supplier security. Strong emphasis on incident response, policy lifecycle, and executive reporting.

Qualifications

• Five+ years in IT compliance or IT governance with control/audit responsibility.
• Hands-on experience with security frameworks (NIST CSF, ISO 27001, SOC 2).
• Experience with GRC automation platforms (Vanta, Drata, Secureframe).
• Experience managing outsourced IT providers and SLAs.
• Knowledge of core IT controls (identity, access, logging, backups, change mgmt).
• Ability to read SOC 2 Type II reports critically and identify gaps.

Responsibilities

• Lead the compliant control program mapped to NIST CSF 2.0 across six Functions.
• Administer MSP governance, SLAs, escalations, and reporting.
• Coordinate evidence for audits, assessments, and customer security reviews.
• Maintain policy lifecycle, risk register, and executive reporting.
• Oversee vendor intake, third-party assurance artifacts, and data protection terms.
• Drive incident response, business continuity, and tabletop exercises.

Skills

IT compliance

Information security

GRC platforms

Vendor management

IT controls

SOC 2 Type II reporting

NIST CSF 2.0

Clear written communication

Security framework knowledge

Contract negotiation

Education

Bachelor's degree in a relevant field

Professional certification such as CISA/CRISC/CISM/CISSP

Tools

Vanta

Drata

SOC 2 reports tooling

Job description

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to design, operate, and evidence the company’s control program against NIST CSF 2.0. This role also oversees the MSP delivering day-to-day IT operations and ensures compliance with partner and regulatory requirements.

Remote-friendly employer with a focus on governance, risk, and supplier security. Strong emphasis on incident response, policy lifecycle, and executive reporting.