IT and Compliance Manager - FMX

FMX is seeking an IT & Compliance Manager to join our team! We’re a remote-first company, but this role will work onsite at our Grandview Heights headquarters a few days each week.

You’ll lead our IT operations and compliance program, managing our IT Specialist, setting IT standards across the organization, and leading our SOC 2 and GovRAMP audits. This is a player-coach role, ideal for someone equally comfortable shaping policy and rolling up their sleeves.

Responsibilities

Team Leadership & IT Operations

• Directly manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching
• Set priorities and oversee the day-to-day IT support workload and ticket queue
• Define and enforce IT standards, policies, and best practices across the organization
• Own IT documentation, runbooks, and the internal knowledge base

Infrastructure & Security

• Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management
• Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems
• Monitor and respond to Microsoft Defender for Endpoint alerts, and lead incident response for IT-related security events
• Manage software licensing, procurement, and vendor relationships
• Partner with the CTO on long-term IT strategy, tooling decisions, and improvements to our security posture

Compliance & Audit Management

• Lead third-party SOC 2 (Type II) and GovRAMP audits from start to finish, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings
• Administer Vanta, FMX’s compliance automation platform, including system integrations, automated control tests, control and policy ownership, and audit evidence collection
• Maintain FMX’s control inventory, mapping IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements
• Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and required employee training
• Partner with Engineering, Product, HR, and other control owners to gather audit evidence and close gaps on schedule
• Draft, maintain, and annually review information security and compliance policies, and track employee policy acknowledgments
• Support Sales and Customer Success by responding to customer security questionnaires and due-diligence requests
• Conduct risk assessments for third-party vendors and service providers that handle FMX or customer data

Employee Experience

• Deliver a smooth, well-coordinated IT onboarding and offboarding experience for every FMX employee
• Serve as the escalation point for complex or unresolved IT issues
• Champion a service-oriented IT culture that keeps employee satisfaction with IT support high

Requirements

• Minimum of 3 years of experience in IT support, systems administration, or IT compliance
• At least 1 year of experience in a lead, supervisory, or management role
• A proven track record of managing and developing technical team members
• Strong experience with Windows, Microsoft Active Directory, and Azure/Microsoft 365 environments
• Experience owning endpoint management at scale, including imaging, MDM, and patch management
• Hands-on experience coordinating or supporting third-party compliance audits, ideally SOC 2 Type II
• Excellent organizational and project management skills, with a track record of driving cross-functional work to on-time completion
• Clear, collaborative communication skills, including the ability to explain technical concepts to non-technical audiences
• A resourceful, solutions-oriented mindset that focuses on finding a way forward rather than getting stuck on roadblocks
• Alignment with FMX’s core pillars: a strong work ethic, discipline in our processes and responsibilities, coachability and openness to feedback, a results-driven approach, and treating everyone with respect and integrity

Nice to Have

• Experience with GovRAMP (formerly StateRAMP), FedRAMP, or NIST SP 800-53 control frameworks
• Hands-on experience with Vanta or a similar compliance automation platform, such as Drata or Secureframe
• Relevant certifications such as CISA, CISSP, or CompTIA Security+
• Familiarity with Google Workspace administration
• Experience with helpdesk ticketing systems
• Some familiarity with macOS environments
• Knowledge of Azure VPN client setup and VPN administration

Benefits & Perks

• Competitive benefits: 100% company-paid health, dental, vision, long and short term disability, and life insurance.
• Work from home & office: Remote-first flexibility with an optional office space in Grandview Heights featuring free snacks, beverages, and an office kegerator.
• Home office stipend: Company-sponsored laptop, headset, up to $500 for equipment and furniture, and $60/month toward home internet.
• Generous PTO & UTO: Separate policies for vacation and unplanned time off (illness).
• Flexible Schedule: Manage personal appointments as long as performance expectations and project timelines are met.
• Retirement: 401(k) plan included.