Vice president, it and security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vice President, IT and Security based in the United States.

This role provides executive leadership across both IT and Security in a fully distributed B2B SaaS environment. You will lead a seven-person organization spanning security, IT, product security, governance, risk, and compliance. The position combines strategic leadership with hands-on technical involvement across detection, incident response, identity, cloud, endpoints, and product security. You will partner closely with Engineering, Product, DevOps, People Operations, Finance, and Sales to translate technical risk into practical business decisions. The role also owns the ongoing SOC 2 program, security operations, IT infrastructure, and technology ecosystem. It is designed for a leader who can build strong teams while remaining deeply engaged in day-to-day security and IT operations.

Accountabilities:

As Vice President of IT and Security, you will set the direction for two critical functions while ensuring strong execution, measurable outcomes, and close alignment with business priorities. Key responsibilities include:

• Lead, coach, and develop a high-performing IT and Security organization, building technical depth, succession plans, clear ownership, standards, SLAs, and effective operating practices.
• Shape the organization for current execution and future scale across Corporate Security, Product Security, Governance, Risk & Compliance, and IT.
• Own the IT and Security budget, connecting headcount and technology investments to measurable risk reduction and business value.
• Represent IT and Security in executive discussions and translate technical and operational risk into clear, actionable recommendations.
• Partner with Engineering, Product, DevOps, People Operations, and Finance on onboarding, offboarding, SaaS rollouts, migrations, compliance, and other shared programs.
• Support sophisticated customer security reviews in partnership with Sales.
• Own incident response from detection and triage through containment, eradication, recovery, and post-incident review.
• Build and improve detection capabilities across endpoint, identity, cloud, and SaaS telemetry, measuring effectiveness based on real-world threat visibility.
• Manage the security on-call rotation, escalation processes, severity models, and incident response runbooks.
• Lead the Product Security program and embed security practices throughout the software development lifecycle.
• Own product vulnerability management, including triage, remediation ownership, time-to-fix accountability, and risk escalation.
• Set the strategy for endpoints, identity, SaaS, MDM, patch compliance, hardware lifecycle, and zero-touch provisioning across macOS and Windows environments.
• Own the IAM program, including provisioning, group design, MFA, and access reviews.
• Oversee the organization’s AI, SaaS, cloud, collaboration, source control, and secrets-management ecosystem, ensuring security, scalability, cost effectiveness, and appropriate adoption.
• Establish and track KPIs covering ticket responsiveness, patch and MDM coverage, access reviews, and IT spending.
• Maintain the existing SOC 2 program through continuous evidence collection, control operation, and effective audit management.
• Maintain the risk register and vendor review process while ensuring both remain aligned with funded security priorities.
• Serve as a senior product user and direct feedback channel to Product and Engineering.

Requirements:

The ideal candidate is an experienced IT and Security leader who combines deep hands-on security expertise with strong organizational leadership and business judgment. You should be comfortable operating across strategic and operational priorities, communicating with both technical teams and executives, and taking direct ownership during security incidents. Key qualifications include:

• 12+ years of experience in security engineering, security operations, or a combined security and IT role.
• 8+ years of people-management experience, including hiring, performance management, coaching, and developing technical talent.
• Recent, hands-on experience with detection engineering and incident response, including leading real security incidents from detection through recovery.
• Experience partnering with Engineering and Product organizations on product security programs with measurable results.
• Direct responsibility for IT operations or experience leading an integrated IT and Security function.
• Demonstrated ability to translate strategy into execution with measurable outcomes.
• Working knowledge of SOC 2 sufficient to maintain and operate an established compliance program.
• Experience designing detection capabilities across endpoint, identity, cloud, and SaaS telemetry, including SIEM or comparable log-pipeline environments.
• Practical understanding of adversary behavior and how threats manifest across security data.
• Strong application and cloud security fundamentals, with the ability to contribute meaningfully to technical design reviews.
• Experience with modern identity providers, MDM for macOS and Windows, collaboration and source-control administration, and cloud IAM.
• Working Linux experience.
• Familiarity with PowerShell, Bash, and Python, along with the judgment to assess AI-generated automation for security and correctness.
• Strong architectural and technology evaluation skills, with the ability to balance security, cost, scalability, and operational requirements.
• Ability to balance long-term strategic planning with daily operational demands across multiple functions.
• Clear, credible communication skills in both technical and executive settings.
• Calm and decisive approach during incidents, combined with a candid and improvement-focused mindset afterward.
• Strong organizational leadership and culture-building skills, with a data-driven approach to continuous improvement.

Benefits:

Base salary of $250,000–$270,000 USD. Additional total compensation package including bonus and equity. Equity for full-time employees. 401(k) matching. Flexible PTO and generous sick leave. Comprehensive health insurance plans with employer contributions. 100% company-paid short-term and long-term disability and life insurance. HSA contribution of $100–$200 per month, depending on coverage tier. $25/month lifestyle spending account. $50/month internet reimbursement. $500 home office stipend. Up to $10,000 adoption benefit. Comprehensive family planning coverage through the medical plan. Fully distributed, remote-first work environment across the United States. Position currently unavailable to candidates residing in California or the New York metropolitan area. Work visa sponsorship is not available at this time. Employment is subject to federal, state, and county background checks and local in-person verification. Inclusive environment with opportunities to influence both technical strategy and organizational growth.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.