Manager, IT Compliance & Vendor Management

About The Landline Company The Landline Company is redefining the airport journey by building infrastructure that decentralizes the airport. Its platform connects air and ground transportation, extending the airport experience into everyday places and enabling seamless door-to-gate travel while unlocking new demand. Landline is pioneering remote terminal concepts that bring airport check-in, bag drop, and security screening closer to travelers, including directly into the neighborhoods and destinations where they live, work, and stay. Operating across North America with a growing network of partners, including Air Canada, American Airlines, Sun Country Airlines, and CLEAR, Landline is building the infrastructure that allows travel to begin anywhere. Learn more at landlineco.com. The Role Landline is seeking a Manager, IT Compliance & Vendor Management to build and run the company's cybersecurity control program and to oversee the managed service provider (MSP) that delivers its day-to-day IT operations. This single role owns two connected accountabilities: the performance of Landline's MSP, and the design, operation, and evidencing of the company's control program against the NIST Cybersecurity Framework (CSF) 2.0. Landline operates in a regulated transportation environment and contracts with airline partners and airports that impose their own security and data-handling requirements. The control program must satisfy those obligations as well as the company's internal risk requirements. Compensation 120,000 – 175,000 What You Will Do Maintain the company's control set mapped to NIST CSF 2.0 across all six Functions: Govern, Identify, Protect, Detect, Respond, and Recover Administer the Vanta GRC platform, including integrations, control monitoring, evidence collection, automated test configuration, and remediation tracking Perform periodic control testing and design effectiveness reviews, document results, and drive remediation to closure with named owners and due dates Own the policy lifecycle: drafting, annual review, approval routing, publication, and attestation tracking Maintain the enterprise risk register, including risk scoring methodology, treatment decisions, and executive reporting Prepare and coordinate evidence for customer security reviews, airline partner assessments, insurance questionnaires, and external audits or assessments Administer the security awareness training program, including phishing simulation and completion tracking Serve as the primary relationship owner for the MSP, managing escalations, scheduling, and day-to-day service delivery expectations Monitor and report on contracted service levels, document breaches, drive root-cause analysis, and enforce contractual remedies where warranted Chair quarterly business reviews with the MSP, setting the agenda, tracking commitments, and maintaining a running action log Own the MSP contract lifecycle, including scope changes, renewals, pricing negotiation, and the exit and transition plan Verify that MSP-operated controls function as contracted, requiring evidence rather than assertion Govern access administration performed by the MSP, including joiner/mover/leaver execution, privileged access review, and periodic user access certification Maintain the responsibility assignment matrix (RACI) that defines which controls the MSP operates, which Landline operates, and which are shared Operate the vendor intake and security review process for new technology purchases Maintain the vendor inventory with data classification, criticality tiering, and review cadence Collect and review third-party assurance artifacts (SOC 2 Type II reports, ISO 27001 certificates, penetration test summaries), including analysis of complementary user entity controls and any qualified opinions Track vendor contract security terms, breach notification obligations, and data processing agreements Maintain the incident response plan and coordinate the annual tabletop exercise Serve a…

View the full posting and apply