IT & Security Manager

Vizcom • San Francisco, CA

2d • $157,000 - $186,000 • Onsite

About The Position

Vizcom is an AI-powered design company building sketching and collaboration tools that help designers move from sketches to physical products. The IT & Security Manager owns the day-to-day IT function and operational execution of the security program, building systems, processes, and infrastructure to support the growing team. This hands-on role is the primary contact for employee IT needs and covers identity and access management, SaaS administration, device management, troubleshooting, endpoint security, and IT security operations.

The role reports to the Head of People and works closely with the Senior Manager, Compliance & Trust, who provides functional direction on security and compliance priorities. It also partners with Engineering and teams across Vizcom. The focus is on taking ownership, improving operations, and building scalable foundations without introducing unnecessary enterprise complexity.

Requirements

• 3–5 years of experience in IT, IT Operations, Systems Administration, Security Operations, or a similar hands-on technical role, including meaningful hands-on security responsibility.
• Experience significantly contributing to internal IT operations within a growing organization, ideally a startup or technology company.
• Strong experience supporting macOS in a managed environment.
• Strong experience with identity and access management, including SSO, MFA, user provisioning, permissions, role-based access, privileged access, and access controls.
• Experience administering Google Workspace, Slack, password management, and other SaaS tools commonly used by technology companies.
• Hands-on experience with an MDM or endpoint management platform such as Kandji, Jamf, Intune, or Workspace ONE, including building and deploying policies.
• Experience with EDR or other endpoint security tools, including reviewing detections, understanding process activity, and isolating endpoints.
• Working knowledge of security fundamentals, including least-privilege access, endpoint security, encryption, patching, secure employee offboarding, and incident response.
• Working knowledge of networking fundamentals, including DNS, DHCP, TCP/IP, and VPNs, and ability to distinguish network issues from device or application issues.
• Experience working within a ticketing system and managing support requests against defined response and resolution expectations.
• Strong troubleshooting skills and ability to independently investigate and resolve employee hardware, software, account, access, and endpoint issues.
• Systems-oriented mindset and ability to turn informal or fragmented processes into clear, repeatable workflows.
• Strong organizational and documentation skills, with attention to operational details that keep systems reliable and secure.
• Excellent written and verbal communication skills, including clear documentation of technical issues and security incidents for technical and non-technical audiences.
• Service-oriented and patient approach to supporting employees with varying levels of technical proficiency.
• Strong judgment and ability to prioritize among employee support issues, security alerts, and longer-term operational projects.
• Comfort working independently and taking ownership of problems from identification through resolution.
• Good judgment about when to solve something, automate it, or escalate or seek outside expertise.
• High degree of discretion and confidentiality when handling systems, security information, and employee data.
• Enjoy planning, executing, winning, and celebrating as a team.
• Experience working remotely and/or in a startup environment.

Nice To Haves

• Experience supporting an organization operating under SOC 2 or ISO 27001 requirements.
• Experience gathering technical evidence for audits, cyber insurance questionnaires, or customer security reviews.
• Familiarity with AWS, Azure, or GCP, particularly at the identity and logging level.
• Experience participating in security incident response, tabletop exercises, or post-incident reviews.
• Experience managing IT or security vendors, hardware lifecycle programs, and SaaS licensing.

Responsibilities

• Provide and own day-to-day employee IT support across macOS, Windows, mobile devices, SaaS applications, peripherals, conference room technology, and workplace connectivity.
• Manage Tier 1 and Tier 2 support requests from intake through resolution, including login and MFA issues, application errors, VPN and connectivity problems, device performance, and peripherals.
• Establish an effective employee IT support request process and clear response and resolution expectations.
• Escalate issues to vendors, Engineering, or other technical owners, providing troubleshooting details, reproduction steps, and logs.
• Manage employee account creation, access changes, and deactivation across company systems.
• Manage identity and access, including SSO, MFA, permissions, role-based access, privileged access, and regular access reviews.
• Administer Google Workspace, Slack, password management, and other company-wide SaaS applications.
• Apply least-privilege principles and identify stale accounts, unnecessary permissions, and standing administrative access.
• Manage device management, including MDM, endpoint security, encryption, patching, software deployment, updates, remote wipe capabilities, and device compliance.
• Manage company hardware throughout its lifecycle, including inventory, troubleshooting, repairs, replacements, warranties, recovery, retirement, and secure disposal.
• Partner with People on employee onboarding and offboarding, owning technical and security tasks such as accounts, permissions, device configuration, software, access removal, session and credential revocation, and hardware recovery.
• Work with the Senior Manager, Compliance & Trust to operationalize security requirements and maintain relevant technical security controls.
• Monitor and triage EDR and security alerts, investigate detections, identify false positives, and escalate significant or potentially significant incidents to the appropriate security owner.
• Tune security alerts and suppression rules to reduce recurring noise and improve monitoring effectiveness.
• Respond to endpoint security incidents, including isolating devices, collecting artifacts, preserving evidence, and documenting actions.
• Participate in incident response exercises and post-incident reviews and implement operational improvements based on findings.
• Support SOC 2, ISO 27001, cyber insurance, customer security reviews, and other compliance initiatives by producing and maintaining technical evidence.
• Maintain documentation of systems, administrative ownership, configurations, vendors, security controls, processes, and recovery procedures.
• Ensure critical systems have appropriate administrative redundancy and do not depend on a single employee for access or institutional knowledge.
• Manage IT and security vendors, software licenses, warranties, and related operational expenses.
• Review SaaS usage and licenses to identify unused accounts, unnecessary tools, unsanctioned software, and opportunities to consolidate or reduce spending.
• Package and deploy applications and identify opportunities to automate repetitive IT processes or provide employee self-service.
• Develop and maintain documentation and self-service resources for recurring employee IT issues.
• Assess the current IT and endpoint security environment and recommend practical improvements as the company scales.
• Build solutions suited to the company's current needs while avoiding unnecessary complexity or infrastructure.

Benefits

• 100% employer-sponsored medical care for employees and 25% contribution toward dependent care.
• Dental, vision, and mental health care.
• Equity.
• Flexible PTO.
• 401(k) with payroll match.
• Generous annual Learning & Development allowance.
• Paid parental leave.
• Weekly catered lunch at Headquarters Tuesday through Thursday.
• Monthly gym membership stipend.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed