IT and Compliance Manager

About the role

Join us at FMX as our next IT & Compliance Manager! This role offers a flexible hybrid model, spending a few days a week on-site at our Grandview Heights HQ to provide hands-on leadership for our local team. You'll lead our IT operations and compliance program, managing our IT Specialist, setting IT standards across the organization, and leading our SOC 2 and GovRAMP audits. This is a player-coach role, ideal for someone equally comfortable shaping policy and rolling up their sleeves.

Team Leadership & IT Operations

• Directly manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching
• Set priorities and oversee the day-to-day IT support workload and ticket queue
• Define and enforce IT standards, policies, and best practices across the organization
• Own IT documentation, runbooks, and the internal knowledge base

Infrastructure & Security

• Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management
• Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems
• Monitor and respond to Microsoft Defender for Endpoint alerts, and lead incident response for IT-related security events
• Manage software licensing, procurement, and vendor relationships
• Partner with the CTO on long-term IT strategy, tooling decisions, and improvements to our security posture

Compliance & Audit Management

• Lead third-party SOC 2 (Type II) and GovRAMP audits from start to finish, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings
• Administer Vanta, FMX's compliance automation platform, including system integrations, automated control tests, control and policy ownership, and audit evidence collection
• Maintain FMX's control inventory, mapping IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements
• Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and required employee training
• Partner with Engineering, Product, HR, and other control owners to gather audit evidence and close gaps on schedule
• Draft, maintain, and annually review information security and compliance policies, and track employee policy acknowledgments
• Support Sales and Customer Success by responding to customer security questionnaires and due-diligence requests
• Conduct risk assessments for third-party vendors and service providers that handle FMX or customer data

Employee Experience

• Deliver a smooth, well-coordinated IT onboarding and offboarding experience for every FMX employee
• Serve as the escalation point for complex or unresolved IT issues
• Champion a service-oriented IT culture that keeps employee satisfaction with IT support high

Requirements

• Minimum of 3 years of experience in IT support, systems administration, or IT compliance
• At least 1 year of experience in a lead, supervisory, or management role
• A proven track record of managing and developing technical team members
• Strong experience with Windows, Microsoft Active Directory, and Azure/Microsoft 365 environments
• Experience owning endpoint management at scale, including imaging, MDM, and patch management
• Hands-on experience coordinating or supporting third-party compliance audits, ideally SOC 2 Type II
• Excellent organizational and project management skills, with a track record of driving cross-functional work to on-time completion
• Clear, collaborative communication skills, including the ability to explain technical concepts to non-technical audiences
• A resourceful, solutions-oriented mindset that focuses on finding a way forward rather than getting stuck on roadblocks
• Alignment with FMX's core pillars: a strong work ethic, discipline in our processes and responsibilities, coachability and openness to feedback, a results-driven approach, and treating everyone with respect and integrity

Qualifications

• Experience with GovRAMP (formerly StateRAMP), FedRAMP, or NIST SP 800-53 control frameworks
• Hands-on experience with Vanta or a similar compliance automation platform, such as Drata or Secureframe
• Relevant certifications such as CISA, CISSP, or CompTIA Security+
• Familiarity with Google Workspace administration
• Experience with helpdesk ticketing systems
• Some familiarity with macOS environments
• Knowledge of Azure VPN client setup and VPN administration

Benefits

• 100% company-paid health, dental, vision, long and short term disability, and life insurance
• Remote-first culture with optional office use; one all-company event per year
• Free snacks, beverages, and office kegerator when in the office
• Home office stipend: company-sponsored laptop, headset, up to $500 for equipment/furniture/accessories, plus $60/month toward home internet
• Generous PTO and UTO (unplanned time off) policies
• Flexible schedule to manage personal appointments while meeting performance expectations and project timelines
• Collaborative, close-knit team culture emphasizing transparency, continuous improvement, and work/life balance
• 40