Security & IT Manager (AI)

Location: Remote from Latin America with strong overlap with U.S. business hours

Salary: $70,000–$90,000 per year, paid in USD

Company

Pasito is an AI-native workspace for employee benefits, bringing plan design, payroll and benefits data, claims, and financial context into one platform for insurance carriers, brokers, employers, and employees.

What you will do

• Own the company-wide IT footprint, including domains, Google Workspace, SaaS administration, identity governance, SSO, MFA, MDM, endpoint protection, and hardware inventory.
• Manage onboarding and offboarding, access requests, permission reviews, device enrollment, encryption, patching, and internal IT support.
• Operate Vanta, maintain audit trails, update policies, manage risk reviews, and keep security training and trust resources current.
• Lead SOC 2 Type II audits, HIPAA compliance, penetration testing, vendor and subprocessor risk reviews, DPAs, and BAAs.
• Coordinate vulnerability remediation and security projects with engineering, legal, HR, sales, and leadership.
• Handle customer security questionnaires, including SIG, CAIQ, and custom requests, while communicating security posture and risks to stakeholders.

Requirements

• Based in Latin America and able to maintain strong overlap with U.S. business hours.
• 5+ years of experience in security, IT, or GRC, including ownership of at least one complete SOC 2 Type II cycle.
• Hands-on experience with startup or growth-stage IT operations, identity and access management, SSO, MDM, and SaaS administration.
• Production experience with Vanta, Drata, or Secureframe.
• Technical ability to assess penetration-test findings, judge severity, and work with engineers on remediation.
• Strong project-management, organizational, written, and verbal English communication skills.

Nice to have

• CISA, CISSP, or ISO 27001 Lead Auditor certification.
• Healthcare, HIPAA, benefits, or insurance industry experience.
• Experience at an early- or growth-stage B2B SaaS company serving enterprise or regulated customers.

Culture & Benefits

• Remote-first work from anywhere in Latin America.
• Annual team offsites.
• Learning and development budget for certifications, courses, books, or conferences.
• High-visibility ownership of the security, IT, and compliance function from the ground up.
• Collaboration with engineering, HR, legal, sales, auditors, and customers.

Hiring process

• Silver screening interview and client resume review.
• Client screening and technical interviews.
• Technical presentation and defense, followed by a behavioral interview.