IT & Security Manager

IT & Security Manager
San Francisco, CA • In Person • Full-Time

The Role:

As the IT & Security Manager, you'll own Vizcom's day-to-day IT function and the operational execution of our security program, helping build the systems, processes, and infrastructure that support our growing team.

You'll be the primary point of contact for employee IT needs and manage everything from identity and access management to SaaS administration, device management, troubleshooting, endpoint security, and IT security operations.

This is a hands-on role for someone who enjoys solving problems, creating order, and building scalable processes. You'll report to the Head of People and work closely with our Senior Manager, Compliance & Trust, who will provide functional direction on security and compliance priorities. You'll also partner with Engineering and teams across Vizcom to make sure employees have the access, tools, and support they need while keeping our systems secure and well managed.

We're not looking for someone to build a large IT organization or introduce unnecessary enterprise complexity. We're looking for a strong operator who can own the work, improve how we do it, and build an IT and security operations foundation that can scale with us.

How You'll Do It:

• Serve as the primary point of contact and owner for day-to-day employee IT support across macOS, Windows, mobile devices, SaaS applications, peripherals, conference room technology, and workplace connectivity
• Own Tier 1 and Tier 2 support from intake through resolution, including login and MFA issues, application errors, VPN and connectivity problems, device performance, and peripherals
• Establish a simple, effective process for employees to request IT support and create clear expectations around response and resolution times
• Escalate issues to vendors, Engineering, or other technical owners when appropriate, providing the troubleshooting, reproduction steps, and logs needed to resolve them efficiently
• Own employee account creation, access changes, and deactivation across company systems
• Manage identity and access, including SSO, MFA, permissions, role-based access, privileged access, and regular access reviews
• Administer core employee systems and SaaS applications, including Google Workspace, Slack, password management, and other company-wide tools
• Apply least-privilege principles to provisioning and access management and regularly identify stale accounts, unnecessary permissions, and standing administrative access
• Own device management, including MDM, endpoint security, encryption, patching, software deployment, updates, remote wipe capabilities, and device compliance
• Manage the ongoing lifecycle of company hardware, including inventory, troubleshooting, repairs, replacements, warranties, recovery, retirement, and secure disposal
• Partner with People on employee onboarding and offboarding, owning the technical and security components of the employee lifecycle, including accounts, permissions, device configuration, software, access removal, session and credential revocation, and hardware recovery
• Work closely with the Senior Manager, Compliance & Trust to operationalize security requirements and maintain relevant technical security controls
• Monitor and triage EDR and security alerts, investigate detections, identify false positives, and escalate confirmed or potentially significant incidents to the appropriate security owner
• Tune security alerts and suppression rules where appropriate to reduce recurring noise and improve the effectiveness of monitoring
• Serve as a first responder for endpoint security incidents, including isolating devices, collecting relevant artifacts, preserving evidence, and documenting actions taken
• Participate in incident response exercises and post-incident reviews and help turn findings into concrete operational improvements
• Support SOC 2, ISO 27001, cyber insurance, customer security reviews, and other compliance initiatives by producing and maintaining technical evidence such as asset inventories, endpoint coverage, patching records, access reviews, and device compliance records
• Maintain accurate documentation of systems, administrative ownership, configurations, vendors, security controls, processes, and recovery procedures
• Ensure critical systems have appropriate administrative redundancy and are not dependent on a single employee for access or institutional knowledge
• Manage IT and security vendors, software licenses, warranties, and related operational expenses
• Regularly review SaaS usage and licenses to identify unused accounts, unnecessary tools, unsanctioned software, and opportunities to consolidate or reduce spend
• Package and deploy applications and identify opportunities to automate repetitive IT processes or create employee self-service where appropriate
• Develop and maintain useful documentation and self-service resources for recurring employee IT issues
• Assess our current IT and endpoint security environment and develop practical recommendations for improving our systems and processes as the company continues to scale
• Build solutions that meet our needs today while avoiding unnecessary complexity or enterprise-level infrastructure that does not make sense for our stage

What You'll Bring:

• 3-5 years of experience in IT, IT Operations, Systems Administration, Security Operations, or a similar hands-on technical role, including meaningful hands-on responsibility for security
• Experience significantly contributing to internal IT operations within a growing organization, ideally within a startup or technology company
• Strong experience supporting macOS in a managed environment
• Strong experience with identity and access management, including SSO, MFA, user provisioning, permissions, role-based access, privileged access, and access controls
• Experience administering Google Workspace, Slack, password management, and other SaaS tools commonly used within technology companies
• Hands-on experience with an MDM or endpoint management platform such as Kandji, Jamf, Intune, or Workspace ONE, including building and deploying policies
• Experience working with EDR or other endpoint security tooling, including reviewing detections, understanding process activity, and isolating endpoints
• Working knowledge of security fundamentals, including least-privilege access, endpoint security, encryption, patching, secure employee offboarding, and incident response
• Working knowledge of networking fundamentals, including DNS, DHCP, TCP/IP, VPNs, and the ability to distinguish network issues from device or application issues
• Experience working within a ticketing system and managing support requests against defined response and resolution expectations
• Strong troubleshooting skills and the ability to independently investigate and resolve employee hardware, software, account, access, and endpoint issues
• A systems-oriented mindset with an ability to turn informal or fragmented processes into clear, repeatable workflows
• Strong organizational and documentation skills with attention to the operational details that keep systems reliable and secure
• Excellent written and verbal communication skills, including the ability to document technical issues and security incidents clearly for both technical and non-technical audiences
• A service-oriented and patient approach to supporting employees with varying levels of technical proficiency
• Strong judgment and the ability to prioritize between employee support issues, security alerts, and longer-term operational projects
• Comfort working independently and taking ownership of problems from identification through resolution
• Good judgment about when to solve something yourself, when to automate it, and when to escalate or bring in outside expertise
• High degree of discretion and confidentiality given the systems, security information, and employee data this role will have access to
• As a colleague, you enjoy planning, executing, winning and celebrating as a team
• Experience working remotely and/or in a startup environment

Bonus Points:

• Experience supporting an organization operating under SOC 2 or ISO 27001 requirements
• Experience gathering technical evidence for audits, cyber insurance questionnaires, or customer security reviews
• Familiarity with AWS, Azure, or GCP, particularly at the identity and logging level
• Experience participating in security incident response, tabletop exercises, or post-incident reviews
• Experience managing IT or security vendors, hardware lifecycle programs, and SaaS licensing
  Benefits While Working At Vizcom:
  
  • 100% employer sponsored medical care for employees, 25% towards dependents
  • Dental, Vision and Mental Health Care
  • Equity
  • Flexible PTO
  • 401(k) with payroll match
  • Generous annual Learning & Development allowance
  • Paid parental leave
  • Weekly catered lunch at Headquarters Tues - Thurs
  • Monthly stipend for gym membership
  
  Compensation:
  Our compensation is tiered by U.S. location to support a consistent and equitable approach across our distributed team. We regularly benchmark compensation against relevant peer companies using current market data from industry-standard sources, including Carta and Pave. For this role, base salary and equity will be determined based on your location and applicable compensation zone:
  Base salary: $157,000 - $186,000 + Equity
  The actual offer, including the compensation package, is determined based on multiple factors, including experience, location, and other business considerations. The overall package described in this post applies to W2, U.S.-based employees. Final package will be determined by local requirements, employment laws, and accessibility.
  Join Us and Make an Impact: At Vizcom, we move fast, offer meaningful equity ownership, and provide a compelling growth trajectory for our team members. We believe in the art of industrial design and strive to improve our world through accelerated visionary processes. Join us in shaping a world designed by you.