IT Security & Compliance Manager, StackOne

• Perfect for someone who thrives in a startup environment and wants to make a real impact on our security posture with the possibility to evolve the role as we keep growing the team and the business
• 3-5 years experience in IT security, compliance, or related field
• Hands-on experience with cloud security (AWS/GCP preferred) including IAM, network security, and monitoring
• Knowledge of compliance frameworks (SOC-2, ISO 27001, GDPR) and audit processes
• Experience with MDM solutions (Jamf preferred) and general IT operations
• Strong written communication skills for security questionnaire responses and policy documentation
• Startup mindset with ability to prioritize and work independently across multiple domains
• Adaptability - comfortable switching between strategic compliance work and hands-on IT tasks
• Detail-oriented - security and compliance require precision and thoroughness
• Growth mindset - eager to learn new tools and technologies as we scale
• Collaborative - works well with both technical and non-technical teams
• Ownership mentality - takes initiative and sees projects through to completion

Desirable

• We’re looking for a hands-on IT Security & Compliance Manager to own our security infrastructure, compliance processes, and IT operations as we scale
• This is a unique opportunity to build security foundations from the ground up at a fast-growing Series A startup while wearing multiple hats across cloud security, compliance management, and operational IT
• You’ll be the go-to person for everything from managing customer security questionnaires and maintaining SOC-2 compliance to deploying Jamf for device management and handling day-to-day IT support
• Own customer security questionnaires and manage the entire response process from initial receipt to final submission
• Drive SOC-2 and ISO 27001 certification projects, coordinating with auditors and implementing required controls
• Maintain and update security policies across the organization, ensuring they reflect current best practices
• Conduct security risk assessments and vulnerability management across our cloud infrastructure
• Collaborate with engineering teams on security architecture decisions and code security reviews
• Manage AWS security configurations including IAM policies, network security groups, and logging
• Implement and maintain security monitoring tools for threat detection and incident response
• Oversee backup and disaster recovery processes to ensure business continuity
• Monitor compliance with data protection regulations (GDPR, CCPA, HIPAA)
• Own and maintain VPN security
• Manage Jamf for macOS device management across the organization
• Handle software and hardware onboarding/offboarding for new and departing team members
• Provide general IT support and set-up related processes such as user access management
• Manage vendor relationships for IT services and security tools
• Maintain IT asset inventory and ensure proper lifecycle management