Security and IT Operations Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee daily SOC 2 compliance activities, including controls, evidence gathering, access reviews, policy acknowledgments, and training.

• Collaborate directly with auditors and control owners, ensuring that findings are addressed and resolved.

• Assist in merging two compliance programs by selecting and configuring a GRC platform, revising control descriptions, and reducing manual tasks.

• Manage corporate IT responsibilities, encompassing Google Workspace, SaaS applications, onboarding/offboarding processes, and the Mac fleet via Rippling.

• Provide support to employees regarding laptop and access issues while enhancing IT processes.

• Streamline access-management procedures for requesting, approving, granting, and removing user access.

• Oversee macOS and application updates, investigate endpoint alerts, track vulnerabilities to resolution, and confirm fixes.

• Engage in phishing response and other corporate incident management activities.

• Automate repetitive IT and compliance tasks using scripts, APIs, workflow tools, or AI solutions.

• Contribute to the development of the integrated company’s Security & Systems function, with potential growth into security operations, engineering, risk management, or AI governance.

⛳️ Requirements

• Practical IT and compliance experience in both domains.

• Proven experience managing recurring SOC 2 tasks and collaborating with external auditors, or experience in auditing.

• Knowledge of controls, evidence showing control operation, and adapting controls across various systems and teams.

• Experience in administering and securing corporate IT systems, including account management, onboarding/offboarding, and managing Macs via an MDM.

• Familiarity with patching, endpoint alerts, remediation tracking, phishing or suspicious activity, and troubleshooting for employees.

• Proficiency in automating routine tasks using scripts, APIs, workflow tools, or AI, along with a demonstrated example of a project completed.

• Ability to coordinate work across teams, assign responsibilities and deadlines, resolve obstacles, escalate when necessary, and ensure tasks are completed and documented.

• Experience with Google Workspace, Rippling, or GRC platforms like Vanta, Drata, or Thoropass.

• Understanding of SSO, SCIM provisioning, or other automated account access methods.

• Background in implementing or migrating IT or compliance systems, or enhancing cross-team processes.

🏝️ Benefits

• Remote-first team with a flexible-first culture.

• Equity Stock Options.

• 401(k) with a 5% company match (vests immediately!).

• Unlimited PTO.

• Medical, Dental, and Vision insurance.

• Generous Parental Leave.

• Life Insurance and Disability benefits.

• $800/month remote work stipend.