FMX is seeking an IT & Compliance Manager to join our team! We’re a remote-first company, but this role will work onsite at our Grandview Heights headquarters a few days each week.
You’ll lead our IT operations and compliance program, managing our IT Specialist, setting IT standards across the organization, and leading our SOC 2 and GovRAMP audits. This is a player-coach role, ideal for someone equally comfortable shaping policy and rolling up their sleeves.
Team Leadership & IT Operations
- Directly manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching
- Set priorities and oversee the day-to-day IT support workload and ticket queue
- Define and enforce IT standards, policies, and best practices across the organization
- Own IT documentation, runbooks, and the internal knowledge base
Infrastructure & Security
- Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management
- Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems
- Monitor and respond to Microsoft Defender for Endpoint alerts, and lead incident response for IT-related security events
- Manage software licensing, procurement, and vendor relationships
- Partner with the CTO on long-term IT strategy, tooling decisions, and improvements to our security posture
Compliance & Audit Management
- Lead third-party SOC 2 (Type II) and GovRAMP audits from start to finish, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings
- Administer Vanta, FMX’s compliance automation platform, including system integrations, automated control tests, control and policy ownership, and audit evidence collection
- Maintain FMX’s control inventory, mapping IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements
- Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and required employee training
- Partner with Engineering, Product, HR, and other control owners to gather audit evidence and close gaps on schedule
- Draft, maintain, and annually review information security and compliance policies, and track employee policy acknowledgments
- Support Sales and Customer Success by responding to customer security questionnaires and due-diligence requests
- Conduct risk assessments for third-party vendors and service providers that handle FMX or customer data
Employee Experience
- Deliver a smooth, well-coordinated IT onboarding and offboarding experience for every FMX employee
- Serve as the escalation point for complex or unresolved IT issues
- Champion a service-oriented IT culture that keeps employee satisfaction with IT support high
