IT & Security Manager

We are hiring an IT & Security Manager to join our IT & Security team. This position reports to the Director, IT & Information Security and takes Away further by serving as a highly trusted technical anchor for the brand. In this role, you'll be empowered to shape modern, resilient IT and security practices that directly protect our people, safeguard our assets, and enable our global business to scale seamlessly. What you'll do as the IT & Security Manager • You'll own and maintain Okta as our central identity provider and system of record for access (SSO/SCIM, RBAC, and JML) across global entities and retail • You'll design and manage automated lifecycle workflows and access reviews via Okta Workflows and Rippling integrations to ensure continuous data integrity • You'll strengthen authentication with phishing-resistant MFA, privileged access hardening, and device-based conditional access • You'll own the day-to-day execution of the information security program by driving the end-to-end vulnerability management lifecycle, partnering with our outsourced SOC to lead security incident triage and escalation, enforcing access-linked security awareness training, and tracking operational risk posture against functional benchmarks • You'll protect data in our collaboration platforms through SaaS backup and restore testing, OAuth and integration governance, retention and legal hold, and tiered DLP • You'll review new AI and SaaS tools for security and data handling, and keep contractors in a managed virtual desktop environment • You'll govern our enterprise AI platforms, including seats, access tiers, token and API security, and spend, and lead fleet-wide rollout of AI client apps with the IT Operations Engineer • You'll run Service Management as a product that Logistics, Retail Ops, and other teams manage themselves, supported by SLAs, metrics, and documentation • You'll serve as the primary IT partner for People & Culture, Retail Ops, and Logistics, leading site-based IT implementations and cross-functional projects from inception to completion Who you are • You have a minimum of 4 years of experience in information security operations, identity & access management, or IT operations with a security mandate, including ownership of an identity provider (Okta or equivalent) across multiple entities or locations; Okta Certified Administrator certification or equivalent is highly preferred, but not required • You have a proven track record of independently managing identity infrastructure (Okta enterprise-scale) and driving cross-functional technical projects end-to-end with moderate guidance • You've managed an identity provider (Rippling, Okta, Entra, or similar) and reconciled data across systems with discipline, planning for downstream impact before cutover. You've built automations with Okta Workflows or a comparable tool • You know data protection tooling (DLP or CASB, SaaS backup, ransomware recovery), have tested a restore, have run vulnerability management and remediation tracking, and can map operational work to a recognized security framework • You've administered an enterprise AI platform (e.g., Claude, ChatGPT), managing access, usage, and spend, and know endpoint management well enough to partner on fleet-wide deployments • You've administered a service-management platform (Jira Service Management or equivalent), including permissions, workflows, and multi-team rollout • You're comfortable owning ambiguous, cross-departmental projects from scoping through close-out with minimal oversight • You communicate clearly in writing; this role produces documentation other non-technical teams rely on directly • You're creative and innovative; you love to build great new things that are fresh and unique while staying on brand • You're agile, and motivated by a fast-paced and ever changing environment • You're passionate about transforming travel for all (but that's a given!) Excited to join the team, but not sure you meet all of the qualifications? Please apply, we'd still love to hear from you. What We Offer Our total rewards are inclusive of both compensation and benefits. What we offer within a salary range is dependent on a number of factors, including scope and qualifications for the role, skillset, and balancing internal equity relative to other Away employees. Salary and benefit offerings are reviewed during phone screenings to ensure alignment. • Compensation: $130,000.00-$135,000.00 annually • This role is eligible to participate in Away's Annual Company Performance Incentive Bonus Plan, the terms of which are determined at the discretion of the company • Equity Grant: commensurate with level determined at the discretion of the company • Benefits Overview: • Take care of yourself and your family through our health insurance offerings • Invest in your future by participating in our 401(k) (with a company match!) • Find balance through our many paid time off programs (vacation, wellbeing, holidays, summer Fridays, and compassion leave - just to name a few!) • Build your travel uniform through discount codes, product stipends, and giveaways • Give back through company-sponsored volunteer and charitable opportunities How We Work This is an office-based position that works from our Soho, NYC office four days a week. Our working hours are 9am-6pm et, but we embrace a common-sense approach to flexibility in the workplace. It's about being present, engaged, and balancing work with real-life needs.