IT and Compliance Manager

Join us at FMX as our next IT & Compliance Manager! This role offers a flexible hybrid model, spending a few days a week on-site at our Grandview Heights HQ to provide hands-on leadership for our local team.

You'll lead our IT operations and compliance program, managing our IT Specialist, setting IT standards across the organization, and leading our SOC 2 and GovRAMP audits. This is a player-coach role, ideal for someone equally comfortable shaping policy and rolling up their sleeves.

Team Leadership & IT Operations

• Directly manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching
• Set priorities and oversee the day-to-day IT support workload and ticket queue
• Define and enforce IT standards, policies, and best practices across the organization
• Own IT documentation, runbooks, and the internal knowledge base

Infrastructure & Security

• Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management
• Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems
• Monitor and respond to Microsoft Defender for Endpoint alerts, and lead incident response for IT-related security events
• Manage software licensing, procurement, and vendor relationships
• Partner with the CTO on long-term IT strategy, tooling decisions, and improvements to our security posture

Compliance & Audit Management

• Lead third-party SOC 2 (Type II) and GovRAMP audits from start to finish, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings
• Administer Vanta, FMX's compliance automation platform, including system integrations, automated control tests, control and policy ownership, and audit evidence collection
• Maintain FMX's control inventory, mapping IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements
• Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and required employee training
• Partner with Engineering, Product, HR, and other control owners to gather audit evidence and close gaps on schedule
• Draft, maintain, and annually review information security and compliance policies, and track employee policy acknowledgments
• Support Sales and Customer Success by responding to customer security questionnaires and due-diligence requests
• Conduct risk assessments for third-party vendors and service providers that handle FMX or customer data

Employee Experience

• Deliver a smooth, well-coordinated IT onboarding and offboarding experience for every FMX employee
• Serve as the escalation point for complex or unresolved IT issues
• Champion a service-oriented IT culture that keeps employee satisfaction with IT support high