It operations & security lead

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Operations & Security Lead based in the United States.

The IT Operations & Security Lead will oversee day-to-day IT operations while supporting the organization's security and compliance program. This hands-on role combines systems administration, employee technology support, cybersecurity operations, and audit readiness. You will manage the full employee device lifecycle, administer business applications, maintain access controls, and ensure endpoints remain secure and up to date. Working closely with the Security and Compliance Director, you will help maintain SOC 2 controls, coordinate audit evidence, and address vulnerabilities and security incidents. You will also introduce automation and improve internal processes to make IT services more efficient and reliable. This is an opportunity to take ownership of essential technology infrastructure within a mission-driven, fully remote organization.

Accountabilities

IT operations (approximately 60%):

• Manage the complete employee device lifecycle, including procurement, configuration, onboarding, offboarding, inventory management, and equipment retirement.
• Administer Google Workspace and other SaaS applications, maintaining user accounts, permissions, and access controls.
• Manage endpoint devices through mobile device management (MDM), ensuring appropriate patching, encryption, and configuration standards.
• Provide responsive technical support to employees and develop self-service documentation to help colleagues resolve common issues independently.
• Oversee IT vendors, software licenses, and budgets, proactively identifying renewal requirements and cost-saving opportunities.
• Assist with evaluating and testing new technology services and applications.
• Identify opportunities to improve IT processes, service delivery, and operational efficiency.

Security and compliance support (approximately 40%):

• Partner with the Security and Compliance Director to maintain organized, audit-ready evidence for the organization's SOC 2 program.
• Support cybersecurity audits, assessments, and ongoing compliance activities.
• Work with system owners to identify and reduce vulnerabilities, security risks, and compliance gaps.
• Maintain IT policies, procedures, and standard operating practices, ensuring they reflect actual workflows.
• Support security incident response by reviewing alerts, coordinating appropriate escalation, and documenting outcomes.
• Use AI tools and automation to improve security monitoring, third-party risk management, and incident response processes.

Requirements:

• At least 5 years of experience in IT operations or systems administration, including a minimum of 2 years owning IT operations for an organization or office.
• Direct experience supporting a SOC 2 audit or a comparable framework, such as ISO 27001, including evidence collection and the operation of security controls.
• Strong working knowledge of Windows and macOS operating systems; familiarity with Linux is preferred.
• Experience administering identity and access management platforms, mobile device management solutions, and SaaS applications.
• Demonstrated ability to manage IT operations independently while balancing employee support, security priorities, and compliance deadlines.
• Strong documentation skills, including experience creating and maintaining policies, procedures, and standard operating procedures.
• Clear, patient communication skills, with the ability to explain technical concepts and support non-technical colleagues.
• Sound judgment and prioritization skills, particularly when handling competing operational and compliance requirements.
• Commitment to the organization's mission and values, including educational equity and data-driven social impact.

Preferred:

• Hands-on experience with governance, risk, and compliance (GRC) tools.
• Certifications such as CompTIA Security+, Google Workspace Administrator, or Microsoft 365 Administrator.
• Experience integrating HR information systems (HRIS) with identity providers (IdPs) for automated user provisioning.
• Experience building IT processes and systems from the ground up in a small or growing organization.

Must have a permanent US-based address and be authorized to work in the United States indefinitely without employer visa sponsorship.

Must be able to work remotely while keeping the majority of daily working hours between 8:00 AM and 6:00 PM Eastern Time.

Benefits:

• Annual salary range of $98,000–$109,000 USD, depending on experience and internal equity.
• Fully remote work opportunity from anywhere in the United States.
• 100% employer-paid medical, dental, and vision insurance for employees.
• 72% employer coverage for dependent healthcare benefits.
• Flexible paid time off, with at least 20 vacation days encouraged annually.
• Organization-wide shared time off and recharge days.
• Biweekly meeting-free days.
• 12 weeks of paid parental leave.
• Wellness reimbursement program.
• Annual professional development funding, mentorship, and career advancement opportunities.
• 401(k) retirement plan with a 5% employer match.
• Opportunities to connect in person through conferences, strategic planning sessions, and an annual staff retreat.
• Inclusive and collaborative remote work culture focused on diversity, equity, and meaningful social impact.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1