Senior Manager, Security & IT Operations

Security

• Turn security priorities into a concrete roadmap with clear milestones, owners, and metrics.
• Own the GRC program, treating SOC 2 as an ongoing discipline rather than a periodic event.
• Own the ProdSec program, partnering with Engineering and Product to embed security into the development lifecycle.
• Own CorpSec and lead incident response: runbooks, escalation paths, and post-incident reviews that improve response over time.
• Surface threats, resourcing gaps, and risks early, with recommendations attached.

IT Operations

• Set and execute the strategy for endpoints, identity, and SaaS at scale.
• Oversee MDM, patch compliance via Automox, hardware lifecycle, and zero-touch provisioning across macOS and Windows.
• Own the IAM program: provisioning, group design, MFA, and access reviews.
• Administer core SaaS across collaboration, source control, secrets management, and cloud, including ongoing license rationalization.
• Automate repetitive work with AI coding tools and keep it documented, measured, and maintained.
• Track KPIs across ticket responsiveness, patch and MDM coverage, access reviews, and IT spend, using them to drive improvement.
• Serve as a senior Automox power user and feedback channel to Product and Engineering.

Team Leadership

• Develop engineers and helpdesk staff, with clear career paths and succession depth.
• Coach through technical, interpersonal, and performance situations.
• Build a culture of clarity, ownership, and psychological safety across both teams.
• Anticipate hiring needs and shape the org for current execution and near-term scale.

How You Operate

• Partner with Engineering, Product, DevOps, People Ops, and Finance on shared programs: onboarding and offboarding, SaaS rollouts, migrations, and compliance.
• Contribute to leadership discussions on security posture, IT capability, and operational risk.
• Define and maintain the standards, runbooks, and SLAs that keep both teams executing consistently.
• Manage planning and backlog health, keeping deliverables scoped and on time.
• Drive effective, safe use of AI tooling across both teams, applying judgment about where it fits.

What You Bring

Experience

• 6+ years in security engineering or security operations, including hands-on IT operations responsibility (or a combined security and IT role).
• 3+ years managing people.
• A track record of turning strategy into execution with measurable outcomes.