IT Security Manager

Job Summary

As the first internal security hire, the full-time remote IT Security Manager will own end-to-end security operations, including governance, compliance, and security tooling configuration, while serving as the primary liaison with managed IT services and vCISO.

Key responsibilities

• Own and manage the day-to-day security program, translating vCISO direction into actionable outcomes
• Maintain SOC 2 Type II compliance, including evidence collection, control mapping, and audit preparation
• Draft and operationalize security policies and procedures, ensuring alignment with company practices

Required qualifications

• 5+ years of information security experience with direct ownership of security programs
• Hands-on experience with SOC 2 Type II audit cycles
• Proven ability to draft and implement security policies and procedures from scratch
• Experience managing security tools in a cloud-first environment
• Familiarity with identity and access management tools like Okta or equivalent