Employee Location: Boulder, CO, relocation stipend available
Reporting To: Chief Technology Officer
Job Type: Full-time, Hybrid in office Boulder, CO
Work Authorization: Applicants must have legal authorization to work in the U.S. without the need for current or future sponsorship

THE OPPORTUNITY

We're looking for a hands-on leader to own and evolve BranchLab's internal IT, security, compliance, and AI enablement capabilities. This role will bring focused ownership to the systems and processes that keep BranchLab secure, compliant, productive, and current as we grow.

You'll manage the technology our employees rely on every day, continue to strengthen our security program, support SOC 2 and customer security reviews, and help us adopt AI throughout the business in a thoughtful and secure way.

A major part of the role is helping BranchLab take advantage of rapidly evolving AI capabilities. You'll identify opportunities to integrate AI into existing systems and workflows, evaluate emerging tools, build practical automations, and establish appropriate guardrails for how AI is used with company and customer data.

This is a highly hands-on role. We are not looking for a traditional CISO or someone who primarily manages a large IT organization. We're looking for someone who enjoys solving problems directly, can establish pragmatic processes, and can help the entire company work more effectively.

KEY RESPONSIBILITIES

• Operate and continuously improve security controls across endpoints, identity, cloud services, and corporate systems.
• Own BranchLab's internal IT environment, including identity and access management, employee devices, SaaS applications, onboarding/offboarding, and day-to-day technology operations.

• Lead operational support for SOC 2, including control execution, evidence collection, remediation tracking, policy maintenance, and audit coordination.
• Own or coordinate responses to customer, partner, and vendor security and compliance questionnaires.
• Identify and implement practical uses of AI across the company, including integrations, automations, copilots, agents, and AI-enabled business workflows.
• Establish secure and responsible practices for adopting AI tools, including data handling, vendor evaluation, access controls, and appropriate use of company and customer information.
• Partner with Engineering, Product, Operations, and business teams to improve security, productivity, and automation while keeping processes pragmatic and lightweight.

QUALIFICATIONS

• Experience owning or administering IT systems in a modern cloud-based organization.
• Strong understanding of identity, access management, endpoint security, SaaS administration, and security fundamentals.
• Experience supporting security or compliance programs such as SOC 2, including audits, evidence collection, risk remediation, or customer security reviews.
• Strong technical aptitude and the ability to troubleshoot integrations, APIs, authentication, permissions, and SaaS platforms.
• Hands-on experience using AI tools to improve business workflows, automate processes, or integrate AI capabilities into existing systems.
• Ability to evaluate new technologies from both a productivity and security perspective.
• Strong communication skills and the ability to work directly with technical teams, business users, auditors, customers, and vendors.
• A pragmatic mindset focused on implementing appropriate controls without creating unnecessary process or bureaucracy.

NICE-TO-HAVES

• Experience with Microsoft Entra ID, Microsoft 365, SSO, SAML, SCIM, and modern identity management.
• Experience with endpoint management, MDM, EDR, and device security.
• Familiarity with AWS security and cloud infrastructure.
• Experience administering or integrating Jira, Salesforce, Slack, GitHub, or similar SaaS platforms.
• Experience building automations using APIs, low-code tools, scripting, or AI agents.
• Familiarity with AI governance, privacy, security reviews, or enterprise adoption of generative AI.
• Experience in healthcare, AdTech, or another privacy-sensitive or regulated environment.

WHY JOIN BRANCHLAB?

• Competitive salary (145-195k) + significant equity
• Take ownership of a function with immediate impact across the entire company.
• Be at the center of BranchLab's adoption of emerging AI technologies.