2 дня назад
Director, IT & Security
200 000 - 250 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Director, IT & Security (SOC 2/IT Operations): Building Stepful's IT and security function, including SOC 2 compliance, identity and access management, endpoint security, equipment lifecycle management, and SaaS governance, with an accent on hands-on operations and healthcare security requirements. Focus on designing scalable security controls, managing audit and customer security requests, hardening infrastructure, and building the future IT team.
Location: Hybrid in New York City, United States; office attendance required Tuesday, Wednesday, and Thursday each week.
Salary: $200,000–$250,000 annual base salary, plus equity and benefits.
Company
is a workforce platform that trains healthcare workers and partners with major healthcare systems to build talent pipelines and expand access to healthcare careers.
What you will do
- Build and own the IT and security function, initially operating as a hands-on individual contributor.
- Lead the security program and maintain SOC 2 compliance, including policies, SSO, MFA, access reviews, and least-privilege controls.
- Manage security questionnaires, vendor assessments, and customer audit requests for healthcare partnerships.
- Own equipment procurement, MDM deployment, inventory, onboarding and offboarding, SaaS administration, and IT support processes.
- Partner with Engineering on incident response, endpoint security, and infrastructure hardening across NYC, St. Louis, and nationwide lab sites.
- Define the long-term IT roadmap and build, hire, and lead the team as the company scales.
Requirements
- 8+ years of IT experience, including leadership of IT or security functions at a high-growth startup.
- Hands-on experience taking SOC 2 Type I and Type II certification from readiness through audit.
- Expertise with modern IT tools, including MDM platforms such as Kandji or Jamf, identity providers such as Okta or Google Workspace, and endpoint security tooling.
- Ability to combine strategic leadership with hands-on individual-contributor work.
- Strong vendor management and communication skills across hardware, software, audit partners, and non-technical teams.
- Experience creating IT processes and systems from scratch.
Nice to have
- Experience with HIPAA or healthcare data compliance.
- Experience building an IT function from zero at a scaling company.
- Background in EdTech, healthcare, or another mission-driven industry.
Culture & Benefits
- Mission-driven environment focused on healthcare workforce access.
- Equity stake and subsidized medical, dental, and vision insurance.
- 401(k), FSA, HSA, and commuter benefits.
- Open vacation policy with guidance of 15 PTO days annually, plus company closure during the last week of December and 10 public holidays in 2026.
- 15 work-from-anywhere days.
Hiring process
- Introductory call with Talent Acquisition.
- Hiring manager interview, take-home assignment and presentation.
- On-site panel interview.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
1 день назад
Head of Corporate IT & Security (AI Governance)
150 000 - 200 000$
2 дня назад
Director of Governance, Risk, and Compliance (GRC)
200 000 - 275 000$
1 день назад
Head of Security (AI)
300 000 - 375 000$
1 день назад
IT & Information Security Lead (AI)
140 000 - 210 000$
6 дней назад
Identity & Endpoint Security Engineer (Okta)
120 000 - 190 000$
Anthropic
5 часов назад
Security Engineer, Corporate Security
320 000 - 405 000$