Overview
We are looking for our first IT Manager to take ownership of identity and access management, device management, software inventory, and IT controls within the company's SOC 2 program. Working directly with the Director of Business Operations and People and the CTO, you will help shape how securely and efficiently the entire company operates.
This is not a help-desk role. You will address access gaps, establish the policies behind them, and automate processes to improve efficiency over time.
Key Responsibilities
Manage the company's identity provider, SSO, and MFA across Google Workspace, Slack, and other business tools.
Oversee onboarding and offboarding for employees, contractors, and agency partners across multiple countries, ensuring access is revoked on the same day when required.
Conduct quarterly access reviews and maintain evidence demonstrating that security controls are operating effectively.
Establish device standards and manage device administration and endpoint security.
Maintain a comprehensive inventory of software and vendors, identifying opportunities to consolidate duplicate tools and reduce costs.
Own corporate IT controls within the company's SOC 2 Type I and Type II compliance program.
Lead the technical evaluation and integration of the company's new HRIS.
What Makes This Role Different
You will build the IT function from the ground up rather than inherit an existing setup. SOC 2 compliance is a company-wide priority with fixed deadlines, giving you clear visibility and leadership support. You will collaborate with a distributed, international team and solve access management challenges that larger organizations may assign to entire departments.
Requirements
6+ years of experience in IT operations or systems administration, including ownership of corporate IT within a software company.
Hands-on experience with Google Workspace and an identity provider such as Okta, JumpCloud, or Microsoft Entra ID.
Experience preparing and providing evidence for SOC 2, ISO 27001, or similar compliance audits.
Experience managing access for a remote workforce or an organization with a significant number of contractors.
Experience with device management tools such as Jamf, Kandji, Intune, or JumpCloud.
Professional proficiency in written and spoken English, with the ability to work comfortably with US-based leaders.
A habit of automating repetitive tasks using scripts or workflow automation tools.
Experience That Will Help You Stand Out
Familiarity with compliance platforms such as Vanta, Drata, Secureframe, or similar tools.
Experience selecting or integrating an HRIS with an identity provider.
A track record of leading measurable software consolidation initiatives.
Security certifications such as CompTIA Security+ or Okta Administrator.
You Will Probably Thrive Here If
You care about knowing exactly who has access to what and being able to demonstrate that access is properly controlled. You are comfortable working independently across time zones, documenting processes clearly, and improving workflows at their source rather than repeatedly handling the same tasks.
Thông tin chung