Manager of Security & IT

Fabric•United States,

8d•$160,000 - $180,000

About The Position

Scaling security in a regulated environment requires a leader who sets the high-level strategy and actively builds alongside their team rather than leading from a distance. As the Manager of Security and IT, you run security operations and own corporate IT for a healthcare technology company handling PHI at scale. You partner closely with the compliance program owner to uphold HIPAA and SOC2 standards, serving as the influential voice on what security investments matter and what can wait. This is a highly hands-on role where you do not just delegate; you influence policy, run identity, own the endpoint program, lead incident response, and review vendors. Building and scaling this program starts with managing and mentoring a tight-knit team. Leadership here goes beyond standard management to cultivating a culture of technical innovation. You bring an engineering mindset to IT operations by developing custom AI tools, agents, and automation pipelines that bypass standard vendor limitations. More importantly, you serve as a technical mentor, coaching your team to build their own AI competencies so they can architect internal tools that multiply the entire department's impact.

Requirements

7+ years of security experience with at least 2 years in a security leadership or management role.
Direct experience managing corporate IT operations, including identity, endpoint, MDM, SaaS provisioning, and the helpdesk.
Proven application security or cloud security background. You will partner closely with our Application Security Engineer and must possess the technical depth to lead them, not just manage them.
Experience operating in a healthcare or highly regulated industry environment handling PHI under HIPAA.
Working knowledge of SOC2 and HIPAA frameworks, with HITRUST familiarity as a plus.
Management experience overseeing 1 to 3 direct reports, ideally including building a function from a small base and actively guiding career development.
Proven track record of building and deploying custom AI tools, agents, or automated workflows to streamline IT and security operations.

Nice To Haves

Hands-on experience with Okta or another modern IAM/SSO platform.
AWS or GCP cloud security depth.
Prior incident response leadership at a healthcare or regulated company.
HITRUST or NIST 800-66 specific familiarity.
Experience working with external auditors and assessors.

Responsibilities

Lead Fabric's security program across application security, security operations, identity and access management, endpoint security, cloud security, and vendor security.
Own incident response end-to-end, covering detection, triage, response, post-mortems, and the structural improvements that follow.
Lead customer security questionnaire responses and vendor security reviews, acting as a credible authority who can speak to a CISO at a health system and earn their trust.
Set security policies and standards that engineering, product, and operations can practically follow.
Represent security in executive conversations about risk, investment, and technical tradeoffs.
Own corporate IT operations, including the identity platform (Okta or equivalent), MDM, endpoint management, helpdesk, hardware, and SaaS provisioning.
Build and deploy custom AI tools, agents, and automated workflows to scale IT and security operations, moving beyond standard vendor defaults.
Manage and mentor a team of three direct reports, helping them grow their careers and empowering them to integrate AI into their daily workflows.
Partner with the owner of our compliance program to feed evidence, implement controls, and operationalize SOC2, HITRUST, and HIPAA requirements without bottlenecking either side.