IT and Compliance Manager

Facilities Management Express•Columbus, OH

6d•$110,000 - $130,000•Hybrid

About The Position

FMX is hiring an IT and Compliance Manager to lead IT operations and the compliance program. The role directly manages the IT Specialist, sets IT standards across the organization, and leads SOC 2 Type II and GovRAMP audits. It is a player-coach position combining policy development and hands-on operational work. The position follows a flexible hybrid model, with a few days a week on-site at FMX’s Grandview Heights headquarters; FMX also describes itself as remote-first and welcomes employees to use the office as needed. The manager oversees IT support, endpoint and identity management, security response, licensing, procurement, and vendor relationships, and partners with the CTO on IT strategy and security improvements. The role administers FMX’s compliance automation platform, maintains controls and policies, coordinates audit evidence and remediation, manages compliance schedules, and works with teams across the company on compliance requirements. It also supports customer security due diligence and assesses third-party vendors. The manager is responsible for employee IT onboarding and offboarding, escalates complex IT issues, and promotes a service-oriented IT culture. The position reports to the Chief Technology Officer, who conducts the hiring manager conversation.

Requirements

At least 3 years of experience in IT support, systems administration, or IT compliance.
At least 1 year of experience in a lead, supervisory, or management role.
A proven track record of managing and developing technical team members.
Strong experience with Windows, Microsoft Active Directory, and Azure/Microsoft 365 environments.
Strong experience owning endpoint management at scale, including imaging, MDM, and patch management.
Hands-on experience coordinating or supporting third-party compliance audits, ideally SOC 2 Type II.
Excellent organizational and project management skills, with a track record of driving cross-functional work to on-time completion.
Clear, collaborative communication skills, including the ability to explain technical concepts to non-technical audiences.
A resourceful, solutions-oriented mindset focused on finding a way forward rather than getting stuck on roadblocks.
Alignment with FMX’s core pillars: a strong work ethic, discipline in processes and responsibilities, coachability and openness to feedback, a results-driven approach, and treating everyone with respect and integrity.

Nice To Haves

Experience with GovRAMP (formerly StateRAMP), FedRAMP, or NIST SP 800-53 control frameworks.
Hands-on experience with Vanta or a similar compliance automation platform, such as Drata or Secureframe.
Relevant certifications such as CISA, CISSP, or CompTIA Security+.
Familiarity with Google Workspace administration.
Experience with helpdesk ticketing systems.
Some familiarity with macOS environments.
Knowledge of Azure VPN client setup and VPN administration.

Responsibilities

Directly manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching.
Set priorities and oversee the day-to-day IT support workload and ticket queue.
Define and enforce IT standards, policies, and best practices across the organization.
Own IT documentation, runbooks, and the internal knowledge base.
Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management.
Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems.
Monitor and respond to Microsoft Defender for Endpoint alerts, and lead incident response for IT-related security events.
Manage software licensing, procurement, and vendor relationships.
Partner with the CTO on long-term IT strategy, tooling decisions, and improvements to FMX’s security posture.
Lead third-party SOC 2 Type II and GovRAMP audits from start to finish, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings.
Administer Vanta, including system integrations, automated control tests, control and policy ownership, and audit evidence collection.
Maintain FMX’s control inventory, mapping IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements.
Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and required employee training.
Partner with Engineering, Product, HR, and other control owners to gather audit evidence and close gaps on schedule.
Draft, maintain, and annually review information security and compliance policies, and track employee policy acknowledgments.
Support Sales and Customer Success by responding to customer security questionnaires and due-diligence requests.
Conduct risk assessments for third-party vendors and service providers that handle FMX or customer data.
Deliver a smooth, well-coordinated IT onboarding and offboarding experience for every FMX employee.
Serve as the escalation point for complex or unresolved IT issues.
Champion a service-oriented IT culture that keeps employee satisfaction with IT support high.

Benefits

100% company-paid health, dental, vision, long- and short-term disability, and life insurance.
Company-sponsored laptop, headset, and other necessary work equipment.
Home office stipend of up to $500 for equipment, furniture, and accessories.
$60 per month toward home internet.
Generous PTO and UTO (unplanned time off) policies.
Flexible schedule for personal appointments, subject to performance expectations and project timelines.
Company performance bonus; expected on-target earnings are $121,000–$145,000.
401(k).
Free snacks, beverages, and office kegerator when working in the office.
One all-company event each year.