Head of IT, Security

This is a fully remote position, open to applicants in Arizona, +27 more states.

📋 Description

• Take ownership of IT, identity, and compliance programs from start to finish.

• Oversee SSO/SAML, MFA, provisioning, least-privilege access, and the onboarding/offboarding processes.

• Manage endpoint/MDM, SaaS and vendor risk, phishing awareness, and incident response playbooks.

• Lead SOC 2 Type II readiness, map FERPA/COPPA/state privacy controls, and manage audits.

• Contribute to application security initiatives, including SAST/DAST/SCA within CI.

• Assess vulnerabilities and coordinate remediation efforts with engineering teams.

• Conduct external penetration testing audits.

• Develop security strategy, select appropriate tools, and determine the sequencing of programs.

• Collaborate with engineering, IT, and legal teams.

• Report directly to the CTO.

⛳️ Requirements

• 6+ years of experience in security, preferably within a regulated sector (finance, education, healthcare).

• Practical experience in IT/identity and security operations.

• Proven experience guiding an organization through SOC 2 or ISO 27001 compliance.

• Ability to establish and promote human-centered security processes.

• Strong judgment in risk assessment.

• Extensive technical knowledge accompanied by excellent communication skills.

• Experience in designing or managing a zero-trust environment.

• Bonus: Background in Edtech/FERPA/privacy, CISSP, or OSCP certification.

• Must be authorized to work in the United States.

• Must address visa sponsorship requirements during the application process.

🏝️ Benefits

• Bonus opportunities available.

• Flexible remote work arrangement.