Manager – Security & IT

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead Fabric's security initiatives encompassing application security, security operations, identity and access management, endpoint security, cloud security, and vendor security.

• Take ownership of the incident response process from detection to triage, response, post-mortems, and implementing structural enhancements.

• Oversee responses to customer security questionnaires and conduct vendor security assessments.

• Establish security policies and standards for engineering, product development, and operational activities.

• Represent the security function in executive discussions regarding risk management, investment decisions, and technical trade-offs.

• Manage corporate IT operations, which include the identity platform, mobile device management (MDM), endpoint management, helpdesk, hardware, and SaaS provisioning.

• Develop and implement custom AI tools, agents, and automated workflows for IT and security operations.

• Supervise and mentor three direct reports.

• Collaborate with the compliance program owner to provide necessary evidence, implement controls, and operationalize SOC2, HITRUST, and HIPAA requirements.

⛳️ Requirements

• Over 7 years of experience in the security field.

• A minimum of 2 years in a leadership or management position within security.

• Direct experience in managing corporate IT operations, including identity management, endpoint security, MDM, SaaS provisioning, and helpdesk services.

• Demonstrated background in application security or cloud security.

• Sufficient technical knowledge to lead an Application Security Engineer.

• Experience in the healthcare sector or a heavily regulated industry dealing with PHI under HIPAA.

• Familiarity with SOC2 and HIPAA frameworks.

• Experience managing a team of 1 to 3 direct reports.

• Proven success in building and deploying custom AI tools, agents, or automated workflows for IT and security operations.

• Hands-on experience with Okta or similar modern IAM/SSO platforms.

• In-depth knowledge of AWS or GCP cloud security.

• Previous incident response leadership experience in a healthcare or regulated organization.

• Familiarity with HITRUST or NIST 800-66 standards.

• Experience collaborating with external auditors and assessors.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Unlimited PTO

• 401(k) plan

• Stock options

• Bonuses

• Equal opportunity and inclusive work environment