IT Lead – Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Responsibilities:
- Own IT operations across the organization and serve as the central point of contact for all IT-related needs.
- Build and scale IT processes, documentation, and SOPs.
- Govern company-wide SaaS licenses, access levels, integrations, and vendor relationships.
- Drive IT cost optimization and provide hardware forecasts, budget insights, and operational reporting.
- Own and evolve the company’s security posture, including risk assessments, remediation planning, SOC 2 readiness, security policies, IAM, incident response, audits, vulnerability assessments, security tooling, endpoint protection, and awareness training.
- Administer Google Workspace, Slack, and other collaboration platforms.
- Manage identity-based access controls, SaaS permissions, integrations, endpoint and SaaS health, and the company intranet.
- Partner with Product and Engineering on shared access and security policies for the product cloud platform and controller connectivity.
- Provide technical support to employees in a fully remote Mac and PC environment.
- Troubleshoot hardware, software, network, video conferencing, and access issues; own ticket resolution and build a self-service knowledge base.
- Manage IT onboarding and offboarding, including provisioning, access management, device setup, and secure decommissioning.
- Own the hardware lifecycle, including procurement, configuration, deployment, MDM management, inventory, asset recovery, data wiping, redeployment, forecasting, and refresh cycles.
- Serve as the first dedicated IT professional, setting direction and independently executing day-to-day IT and security work.
- Report to the VP of Business Operations.
Requirements:
- 7+ years of experience in IT operations, systems administration, and/or IT security, including experience as the primary owner of IT at a small or mid-sized organization.
- Experience supporting a fully remote workforce.
- Hands-on administration of SaaS and collaboration platforms such as Google Workspace and Slack.
- Strong knowledge of Windows and macOS environments.
- Experience with MDM tools (e.g., Jamf, Microsoft Intune, or Google endpoint management) for remote device provisioning and compliance.
- Hands-on experience with identity and access management, MFA, endpoint protection, and Zero Trust principles.
- Experience with cybersecurity frameworks such as SOC 2, NIST CSF, or ISO 27001, and with conducting or supporting security audits and risk assessments.
- Experience managing IT vendors and budgets.
- Strong troubleshooting skills and excellent documentation habits.
- Excellent communication skills: approachable, patient, and able to explain technical topics clearly to non-technical colleagues and leadership.
- A proactive, curious mindset, staying current on new tools and taking initiative to improve how teams work.
- Ability to manage multiple priorities independently in a fast-paced environment.
- Nice-to-have: experience building an IT function or security program from scratch at a startup or scaling company.
- Nice-to-have: experience leading SOC 2 readiness or a SOC 2 Type II audit.
- Nice-to-have: security certifications such as CompTIA Security+, CISSP, CISM, or equivalent.
- Nice-to-have: experience evaluating or implementing EDR, SIEM, DLP and working with managed security service providers.
- Nice-to-have: knowledge of network security, VPN configuration, Microsoft 365 administration, and internal knowledge bases.
Benefits:
- Company-provided cell phone and laptop
- Medical, Dental, and Vision Insurance
- 401(k) retirement plan
- Flexible time off + 14 paid holidays (yes, your birthday is one of them!)
- Work-from-home stipend to support your remote setup
- Remote-first work environment, fostering work-life balance and autonomy
- Company-provided equipment
- Join a high-performing, mission-driven team doing work that truly matters
- And much more!
Similar Jobs
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.