IT and Compliance Manager

FMX is seeking an IT & Compliance Manager to join our team! We’re a remote-first company, but this role will work onsite at our Grandview Heights headquarters a few days each week.

You’ll lead our IT operations and compliance program, managing our IT Specialist, setting IT standards across the organization, and leading our SOC 2 and GovRAMP audits. This is a player-coach role, ideal for someone equally comfortable shaping policy and rolling up their sleeves.

• Team Leadership & IT Operations
• Directly manage the IT Specialist, including hiring, onboarding, performance reviews, and ongoing coaching
• Set priorities and oversee the day-to-day IT support workload and ticket queue
• Define and enforce IT standards, policies, and best practices across the organization
• Own IT documentation, runbooks, and the internal knowledge base
• Infrastructure & Security
• Oversee endpoint management, including laptop provisioning, imaging, and lifecycle management
• Administer Microsoft Active Directory, Azure VPN, and related identity and access management systems
• Monitor and respond to Microsoft Defender for Endpoint alerts, and lead incident response for IT-related security events
• Manage software licensing, procurement, and vendor relationships
• Partner with the CTO on long-term IT strategy, tooling decisions, and improvements to our security posture
• Compliance & Audit Management
• Lead third-party SOC 2 (Type II) and GovRAMP audits from start to finish, including auditor engagement, scoping, scheduling, evidence collection, and remediation of findings
• Administer Vanta, FMX’s compliance automation platform, including system integrations, automated control tests, control and policy ownership, and audit evidence collection
• Maintain FMX’s control inventory, mapping IT, security, and operational controls to SOC 2 Trust Services Criteria and GovRAMP (NIST SP 800-53) requirements
• Own the compliance calendar, including annual audit cycles, GovRAMP continuous monitoring deliverables, policy and access reviews, and required employee training
• Partner with Engineering, Product, HR, and other control owners to gather audit evidence and close gaps on schedule
• Draft, maintain, and annually review information security and compliance policies, and track employee policy acknowledgments
• Support Sales and Customer Success by responding to customer security questionnaires and due-diligence requests
• Conduct risk assessments for third-party vendors and service providers that handle FMX or customer data
• Employee Experience
• Deliver a smooth, well-coordinated IT onboarding and offboarding experience for every FMX employee
• Serve as the escalation point for complex or unresolved IT issues
• Champion a service-oriented IT culture that keeps employee satisfaction with IT support high

Requirements

What We’re Looking For:

• Minimum of 3 years of experience in IT support, systems administration, or IT compliance
• At least 1 year of experience in a lead, supervisory, or management role
• A proven track record of managing and developing technical team members
• Strong experience with Windows, Microsoft Active Directory, and Azure/Microsoft 365 environments
• Experience owning endpoint management at scale, including imaging, MDM, and patch management
• Hands-on experience coordinating or supporting third-party compliance audits, ideally SOC 2 Type II
• Excellent organizational and project management skills, with a track record of driving cross-functional work to on-time completion
• Clear, collaborative communication skills, including the ability to explain technical concepts to non-technical audiences
• A resourceful, solutions-oriented mindset that focuses on finding a way forward rather than getting stuck on roadblocks
• Alignment with FMX’s core pillars: a strong work ethic, discipline in our processes and responsibilities, coachability and openness to feedback, a results-driven approach, and treating everyone with respect and integrity
• Nice to Have: Experience with GovRAMP (formerly StateRAMP), FedRAMP, or NIST SP 800-53 control frameworks
• Hands-on experience with Vanta or a similar compliance automation platform, such as Drata or Secureframe
• Relevant certifications such as CISA, CISSP, or CompTIA Security+
• Familiarity with Google Workspace administration
• Experience with helpdesk ticketing systems
• Some familiarity with macOS environments
• Knowledge of Azure VPN client setup and VPN administration
• The Hiring Process: Apply! Submit your resume and answers to the application questions below via the Workable portal
• Phone screen with PeopleOps: A 30-minute conversation to review your background and experiences, discuss the culture at FMX, and ensure that you understand the general expectations for the role. Also, a great time for you to ask questions about compensation, benefits, etc.
• Hiring manager conversation: A 60-minute conversation with the Chief Technology Officer. Be prepared to discuss your background as well as what you’re looking for in your next role and what direction you see your career path taking. Also, this is a great time for you to ask questions about the expectations for this role, team culture, etc.
• Final Interview: A 60-minute panel/peer interview.
• Offer & Onboarding: Candidates who receive an offer will be required to complete a background check prior to onboarding.

Company:

FMX was founded in Columbus, Ohio, and is a remote-first organization headquartered “in the cloud”. We develop cloud-based, software-as-a-service facility maintenance and management product, enabling our customers to streamline processes, increase asset productivity, and turn actionable insights into meaningful results. Serving education, property management, manufacturing, and other markets, FMX is one of the fastest-growing companies in its space! Check us out at: