IT & Compliance Manager (SOC 2)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Hybrid in Columbus, Ohio, United States; onsite at the Grandview Heights headquarters a few days each week. is remote-first, but this role requires regular office attendance.
Base salary: $110,000–$130,000 annually, with expected on-target earnings of $121,000–$145,000 including the company performance bonus.
Company
develops a cloud-based software-as-a-service facility maintenance and management product for education, property management, manufacturing, and other markets.
What you will do
- Lead IT operations, manage the IT Specialist, prioritize support tickets, and define organization-wide IT standards, policies, documentation, and runbooks.
- Oversee endpoint provisioning, imaging, lifecycle management, software licensing, procurement, and vendor relationships.
- Administer Microsoft Active Directory, Azure VPN, identity and access management systems, and Microsoft Defender for Endpoint; lead response to IT-related security incidents.
- Lead SOC 2 Type II and GovRAMP audits from scoping and auditor engagement through evidence collection and remediation.
- Administer Vanta, maintain control mappings and the compliance calendar, manage policy reviews and employee training, and coordinate evidence collection with Engineering, Product, HR, and other control owners.
- Support customer security questionnaires, conduct third-party vendor risk assessments, and deliver coordinated employee IT onboarding, offboarding, and escalation support.
Requirements
- At least 3 years of experience in IT support, systems administration, or IT compliance.
- At least 1 year of experience in a lead, supervisory, or management role, including a track record of managing and developing technical team members.
- Strong experience with Windows, Microsoft Active Directory, and Azure/Microsoft 365 environments.
- Experience owning endpoint management at scale, including imaging, MDM, and patch management.
- Hands-on experience coordinating or supporting third-party compliance audits, ideally SOC 2 Type II.
- Excellent organizational and project management skills, including driving cross-functional work to on-time completion.
- Clear, collaborative communication skills and the ability to explain technical concepts to non-technical audiences.
- A resourceful, solutions-oriented mindset focused on finding a way forward, plus a strong work ethic, disciplined processes, coachability, results orientation, respect, and integrity.
Nice to have
- Experience with GovRAMP, formerly StateRAMP, FedRAMP, or NIST SP 800-53 control frameworks.
- Hands-on experience with Vanta or similar compliance automation platforms such as Drata or Secureframe.
- Certifications such as CISA, CISSP, or CompTIA Security+.
- Familiarity with Google Workspace administration, helpdesk ticketing systems, macOS environments, and Azure VPN client setup and administration.
Culture & Benefits
- Remote-first organization with a hybrid arrangement for this role, a flexible schedule, and one all-company event each year.
- Company-paid health, dental, vision, short- and long-term disability, and life insurance; 401(k) is also provided.
- Generous PTO and unplanned time off policies.
- Company-sponsored laptop and headset, up to $500 for home-office equipment, and $60 per month toward home internet.
- Collaborative, transparent, close-knit culture focused on continuous improvement and work-life balance.
Hiring process
- 30-minute PeopleOps phone screen.
- 60-minute conversation with the CTO followed by a 60-minute panel or peer interview.
- Offer recipients must complete a background check before onboarding.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →