Remote IT Compliance & Vendor Risk Manager

The Landline Company; New Castle (DE); Remote; USD 120,000 - 175,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

Life insurance

Flight benefits

Job summary

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to lead its cybersecurity control program and MSP oversight under NIST CSF 2.0. This role owns MSP performance and evidence-driven controls across a regulated transport ecosystem, collaborating with partners and internal teams.

Remote in a major metro area in the United States or Canada with travel as needed. Compensation ranges from 120,000 to 175,000 USD annually, reflecting experience and certifications.

Qualifications

• Five or more years in IT compliance, information security, IT audit, or IT governance, including at least two years with direct responsibility for a control program or audit function
• Hands-on experience implementing or operating a recognized security framework (NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Controls)
• Experience administering or serving as a primary user of a GRC/compliance automation platform (Vanta, Drata, Secureframe, LogicGate, AuditBoard, ServiceNow GRC)
• Experience managing outsourced IT providers, including service level monitoring and escalation
• Working knowledge of core IT controls: identity/access management, endpoint management, logging, vulnerability mgmt, backup/recovery, change mgmt
• Ability to read a SOC 2 Type II or similar report critically
• Professional certifications such as CISA/CRISC/CISM/CISSP are a plus
• Direct NIST CSF 2.0 implementation experience, especially Govern and GV.SC
• Experience in transportation or regulated industries is a plus
• Familiarity with PCI DSS/CCPA/CPRA or state breach notification requirements is welcome
• ITIL foundation or service management background is a plus
• Contract negotiation experience with vendors is a plus

Responsibilities

• Maintain the control set mapped to NIST CSF 2.0 across six functions (Govern, Identify, Protect, Detect, Respond, Recover)
• Administer the Vanta GRC platform including integrations, evidence collection, and remediation tracking
• Perform periodic control testing and document results with owners and due dates
• Own policy lifecycle: drafting, reviews, publication, and attestation tracking
• Maintain the enterprise risk register and executive reporting
• Coordinate evidence for customer security reviews and external audits
• Administer security awareness training and phishing simulations
• Serve as primary relationship owner for the MSP and manage day-to-day service delivery expectations
• Monitor service levels, document breaches, and drive root-cause analysis
• Chair quarterly MSP business reviews and manage MSP contract lifecycle
• Verify MSP-controlled activities and governance of access management
• Maintain RACI for MSP vs Landline controls
• Operate vendor intake/review process for new tech
• Maintain vendor inventory with data classification/tiering
• Collect third-party assurance artifacts (SOC 2 II, ISO 27001, pen test)
• Track vendor security terms and data processing agreements
• Maintain incident response plan and tabletop exercises
• Lead compliance during security incidents including regulatory notifications
• Maintain business continuity and disaster recovery docs and tests
• Deliver recurring compliance and vendor performance reports to leadership
• Provide security/compliance input to procurement/legal/ops
• Track and report program metrics

Skills

IT compliance

IT governance

Security frameworks

GRC platforms

Vendor management

SOC 2 Type II

NIST CSF

ISO 27001

PCI DSS knowledge

Contract negotiation

Education

Bachelor's degree

Tools

Vanta

Drata

Secureframe

LogicGate

AuditBoard

Job description

The Landline Company is seeking a Manager, IT Compliance & Vendor Management to lead its cybersecurity control program and MSP oversight under NIST CSF 2.0. This role owns MSP performance and evidence-driven controls across a regulated transport ecosystem, collaborating with partners and internal teams.

Remote in a major metro area in the United States or Canada with travel as needed. Compensation ranges from 120,000 to 175,000 USD annually, reflecting experience and certifications.