IT & Information Security Compliance Manager

You will own and strengthen the company's security and compliance posture across frameworks such as SOC 2, ISO 27001, FedRAMP High, and NIST. This is a hands-on operational leadership role focused on audit readiness, control implementation, IT governance, and continuous improvement of security programs. You will combine a strong understanding of infrastructure and security controls with experience automating compliance workflows using tools like Drata or Vanta.

Responsibilities

• Lead and maintain enterprise security and compliance programs aligned with SOC 2, ISO 27001/27002, FedRAMP High, and NIST 800-53/171 frameworks
• Build and manage automated compliance monitoring and evidence collection through Drata, Vanta, or equivalent platforms; integrate these with internal systems
• Prepare for and manage SOC 2 Type I/II, ISO audits, and FedRAMP readiness assessments including gap analysis, documentation, remediation, and control testing
• Partner with IT Operations and Engineering to ensure security controls are embedded in infrastructure, cloud, network, and identity systems
• Maintain and update security policies, SSPs, POA&Ms, and other audit documentation
• Oversee incident response, change management, and vendor risk programs
• Manage relationships with external auditors and compliance assessors
• Define and track metrics for audit readiness, risk posture, and compliance automation efficiency
• Stay current with evolving compliance frameworks and technologies
• Champion security awareness, training, and continuous improvement across the organization

Requirements

• 6+ years of experience in IT security, compliance, or risk management within a SaaS or regulated technology environment
• Proven experience managing SOC 2 and ISO 27001 programs end-to-end; exposure to FedRAMP High or NIST 800-53 is a plus
• Hands-on use and administration of Drata, Vanta, Tugboat Logic, or equivalent compliance automation platforms
• Familiarity with AWS/Azure/GCP cloud environments, identity & access management, and IT operations
• Strong technical understanding of security controls: network, endpoint, access, configuration management, logging/monitoring, vulnerability management
• Excellent documentation and communication skills
• Experience leading internal or external audits and managing evidence collection efficiently
• Based in (or willing to relocate to) Edison, NJ and work on-site with leadership and operations teams
• Certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor, or FedRAMP Practitioner preferred
• Experience managing or improving IT operations processes with a compliance lens preferred
• Familiarity with compliance automation APIs or integration scripting is a bonus

Benefits

• Comprehensive health, dental, and vision coverage
• 401(k)
• Paid time off
• Professional development budget
• Certification reimbursement