СШАIT & Security Compliance Manager
2 нед. назад
140k–200k USD / годСШАSeniorOnsite
it securitycompliance management
Manage and build infrastructure for IT security and compliance to support company growth.
О компании
- is the AI-native Employee Management Platform for ambitious companies. HRIS, payroll, benefits, IT, tax compliance, and more, all built from scratch on one AI-native platform.
- Every company runs on its people, and the software that manages them is some of the oldest in the enterprise. Incumbents like ADP and Workday built their businesses on complexity and large ops teams. is built for AI to be the primary operator. Every advance in LLM capability widens our lead.
- We process $X billion in annual payments for high-growth companies across all 50 US states + globally.
- We've raised $85M from Battery Ventures, Sapphire Ventures, Peak XV, Sound Ventures (Ashton Kutcher), and Y Combinator, alongside operators including Tobi Lütke (Shopify), Claire Hughes Johnson (Stripe), and the founders of Dropbox and Replit. Our team comes from MIT, Ramp, Brex, Google, Gusto, Rippling, and more.
- We hire people who ship constantly, own outcomes, and care about craft. If you want to automate an entire category of work that every company depends on, this is the place.
Обязанности
- has grown from 10 to 70 people in the past year, and the systems that work for a small startup don't work for long at this scale. We're looking for an IT & Security Compliance Manager to build and own the infrastructure that keeps secure, compliant, and operational as we continue to grow. You'll own how employees access the tools and systems they need to do their jobs, how devices are provisioned and secured, how we meet our compliance obligations, and how we protect our offices and physical infrastructure. That includes identity and access management, endpoint management, employee onboarding and offboarding, SOC 1, SOC 2, HIPAA, vendor security, and physical security. This role also has a unique opportunity to directly influence what we build for our customers. IT is a growing part of the product, and you'll be both the person operating these systems internally and an expert helping us rethink how they should work. You'll work closely with product and engineering to inform our IT product suite across identity and access, device management, employee lifecycle, and more. You'll dogfood what we build, identify where existing IT tools and workflows fall short, and help us build a better version for our customers. This is a hands-on role. You'll implement systems yourself, automate processes that shouldn't be manual, work directly with engineering and operations, and own projects from identifying the problem through implementation. We're looking for someone wh
- Own identity and access management for employees, including implementing and managing Okta, SSO, MFA, role-based access, and application provisioning
- Own the IT side of the employee lifecycle, including onboarding, offboarding, device provisioning, access changes, and asset management
- Own and continuously improve our SOC 1, SOC 2, HIPAA, and other security and compliance programs
- Translate compliance requirements into practical technical and operational controls rather than treating compliance as a point-in-time audit exercise
- Automate access reviews, evidence collection, employee provisioning, and other repetitive security and IT workflows
- Manage vendor security and third-party risk, including security reviews and ongoing vendor access
- Own office and physical security, including badge access, visitor management, and related policies and systems
- Partner with engineering on security initiatives that cross corporate and product infrastructure
- Work closely with product and engineering to inform 's IT product suite, bringing firsthand experience from operating these systems internally
- Dogfood 's IT products and help identify where we can automate or fundamentally improve the work IT teams do today
Будет плюсом
- Experience building the IT or security function at a startup during a period of rapid headcount growth
- Experience with scripting, APIs, or workflow automation
- Experience with physical and office security
- Experience with vendor risk management and customer security reviews
- Experience supporting enterprise customers and the security requirements that come with them
Условия
- 100% Health Coverage: Comprehensive medical, dental, and vision plans for you and your dependents.
- 401(k) Matching: Start investing in your future from day one.
- Unlimited PTO: We offer flexible PTO, meaning you’re trusted to take the time you need to recharge while balancing your responsibilities and team commitments.
- Commuter Benefits: Pre-tax commuter benefits for your daily trip to our NYC office.
- Catered Lunch Daily: Great food, every day, on us. No meal prep, no decision fatigue.
- Quarterly Offsites: Beautiful locations to connect as a team. Past locations include Spain, Catskills, and San Francisco.
- is based in New York City, and most of our team works together in-office 5x per week. Please refer to the top of this page for this position's hiring location and working model.
Другое
- Like building systems more than administering processes
- Are equally comfortable configuring Okta, working through an auditor request, investigating an access issue, and writing the policy that prevents it from recurring
- Have strong opinions about how modern IT should work and are excited to help turn those opinions into product
- Understand that good security should make the right thing easy rather than create unnecessary bureaucracy
- Can distinguish between a meaningful security control and compliance theater
- Automate repetitive work instead of accepting it as part of the job
- Are comfortable owning ambiguous problems without waiting for someone to give you a playbook
- Communicate clearly with both technical and non-technical teams
- Want to build the IT and security foundation for a company growing quickly rather than inherit a mature enterprise program
- Experience owning IT, corporate security, security compliance, or a combination of these functions at a growing technology company
- Hands-on experience implementing or administering identity and access management systems such as Okta
- Experience with SSO, MFA, SCIM, device management, endpoint security, and SaaS administration
- Experience running SOC 2 or similar compliance programs and working directly with auditors
- Familiarity with SOC 1, HIPAA, and security frameworks and controls relevant to a company handling sensitive customer and employee data
- Experience managing employee onboarding and offboarding from an IT and access perspective
- Strong technical judgment and the ability to understand how systems interact, not just administer individual tools
- High agency. You figure things out.
- Willingness to work from our NYC office five days a week