IT and Compliance Manager

Facilities Management Express•Columbus, OH

17h•$110,000 - $130,000•Hybrid

About The Position

FMX is seeking an IT & Compliance Manager to lead IT operations and the compliance program. This player-coach role manages the IT Specialist, sets organization-wide IT standards, and leads SOC 2 Type II and GovRAMP audits. The role is based at FMX’s Grandview Heights headquarters a few days each week, within a remote-first company. The manager oversees IT support, endpoint management, identity and access systems, security incident response, licensing, procurement, and vendor relationships. They partner with the CTO on IT strategy and security improvements. They also own FMX’s compliance automation platform, control inventory, audit cycles, evidence collection, policy reviews, employee training, risk assessments, and coordination with internal control owners and external auditors. The role also ensures smooth employee IT onboarding and offboarding, acts as an escalation point for complex IT issues, and promotes a service-oriented IT culture. FMX describes itself as a remote-first SaaS company developing facility maintenance and management software.

Requirements

At least 3 years of experience in IT support, systems administration, or IT compliance.
At least 1 year of experience in a lead, supervisory, or management role.
A proven track record of managing and developing technical team members.
Strong experience with Windows, Microsoft Active Directory, and Azure/Microsoft 365 environments.
Experience owning endpoint management at scale, including imaging, MDM, and patch management.
Hands-on experience coordinating or supporting third-party compliance audits; SOC 2 Type II experience is preferred in the posting.
Strong organizational and project management skills, with a track record of driving cross-functional work to on-time completion.
Clear, collaborative communication skills, including explaining technical concepts to non-technical audiences.
A resourceful, solutions-oriented mindset focused on finding a way forward.
Alignment with FMX’s stated pillars: strong work ethic, disciplined processes and responsibilities, coachability and openness to feedback, results-driven approach, and respect and integrity.

Nice To Haves

Experience with GovRAMP (formerly StateRAMP), FedRAMP, or NIST SP 800-53 control frameworks.
Hands-on experience with Vanta or a similar compliance automation platform, such as Drata or Secureframe.
Relevant certifications such as CISA, CISSP, or CompTIA Security+.
Familiarity with Google Workspace administration.
Experience with helpdesk ticketing systems.
Some familiarity with macOS environments.
Knowledge of Azure VPN client setup and VPN administration.

Responsibilities

Manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching.
Set priorities and oversee day-to-day IT support workload and ticket queue.
Define and enforce organization-wide IT standards, policies, and best practices.
Own IT documentation, runbooks, and the internal knowledge base.
Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management.
Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems.
Monitor and respond to Microsoft Defender for Endpoint alerts and lead IT-related security incident response.
Manage software licensing, procurement, and vendor relationships.
Partner with the CTO on long-term IT strategy, tooling decisions, and security posture improvements.
Lead SOC 2 Type II and GovRAMP audits, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings.
Administer Vanta, including integrations, automated control tests, control and policy ownership, and audit evidence collection.
Maintain the control inventory and map IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements.
Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and employee training.
Partner with Engineering, Product, HR, and other control owners to gather evidence and close gaps on schedule.
Draft, maintain, and annually review information security and compliance policies, and track employee acknowledgments.
Support Sales and Customer Success with customer security questionnaires and due-diligence requests.
Conduct risk assessments of third-party vendors and service providers handling FMX or customer data.
Deliver coordinated IT onboarding and offboarding for employees.
Serve as the escalation point for complex or unresolved IT issues.
Promote a service-oriented IT culture and high employee satisfaction with IT support.

Benefits

100% company-paid health, dental, vision, long-term disability, short-term disability, and life insurance.
Home office stipend of up to $500 for equipment, furniture, and accessories.
$60 per month toward home internet.
Generous PTO and UTO policies.
Flexible schedule, subject to performance expectations and project timelines.
Company-sponsored laptop and headset.
Free snacks, beverages, and office kegerator when working in the office.
Company performance bonus eligibility.
401(k).
Collaborative culture and an annual all-company event.