Senior Manager, Security & IT Operations

Automox•Austin, FL

2d•Remote

About The Position

The Senior Manager, Security & IT Operations leads Automox's Security and IT Operations functions. You'll run both teams day to day, set and execute a 6-12 month roadmap, and report directly to the CTO. This is a security-first role: you bring deep security experience and enough IT operations background to lead both well. You'll manage the IT and Security budget, assist with on-call, and lead incident response. Security spans CorpSec (corporate security), ProdSec (product security), and GRC (governance, risk, and compliance). You'll lead a team of seven direct reports as the company continues to scale.

Requirements

6+ years in security engineering or security operations, including hands-on IT operations responsibility (or a combined security and IT role).
3+ years managing people.
A track record of turning strategy into execution with measurable outcomes.
SOC 2 experience and hands-on incident management.
A modern identity provider (IdP), MDM for macOS and Windows, collaboration suite administration, source control administration, and cloud IAM.
Working Linux experience.
Uses AI coding tools effectively to produce and accelerate automation.
Reads that output well enough to review it for correctness and security, guide its design, and sign off on what ships, with working familiarity in PowerShell, bash, and Python.
Sound judgment on architectural and tooling trade-offs.
Balances longer-horizon planning with daily operational demands across two functions.
Clear and credible in technical and leadership conversations, action-oriented on risk.
Handles difficult conversations (performance, misalignment, competing priorities) directly.
A culture builder who is data-driven and energized by leaving things better than they were.

Responsibilities

Turn security priorities into a concrete roadmap with clear milestones, owners, and metrics.
Own the GRC program, treating SOC 2 as an ongoing discipline rather than a periodic event.
Own the ProdSec program, partnering with Engineering and Product to embed security into the development lifecycle.
Own CorpSec and lead incident response: runbooks, escalation paths, and post-incident reviews that improve response over time.
Surface threats, resourcing gaps, and risks early, with recommendations attached.
Set and execute the strategy for endpoints, identity, and SaaS at scale.
Oversee MDM, patch compliance via Automox, hardware lifecycle, and zero-touch provisioning across macOS and Windows.
Own the IAM program: provisioning, group design, MFA, and access reviews.
Administer core SaaS across collaboration, source control, secrets management, and cloud, including ongoing license rationalization.
Automate repetitive work with AI coding tools and keep it documented, measured, and maintained.
Track KPIs across ticket responsiveness, patch and MDM coverage, access reviews, and IT spend, using them to drive improvement.
Serve as a senior Automox power user and feedback channel to Product and Engineering.
Develop engineers and helpdesk staff, with clear career paths and succession depth.
Coach through technical, interpersonal, and performance situations.
Build a culture of clarity, ownership, and psychological safety across both teams.
Anticipate hiring needs and shape the org for current execution and near-term scale.
Partner with Engineering, Product, DevOps, People Ops, and Finance on shared programs: onboarding and offboarding, SaaS rollouts, migrations, and compliance.
Contribute to leadership discussions on security posture, IT capability, and operational risk.
Define and maintain the standards, runbooks, and SLAs that keep both teams executing consistently.
Manage planning and backlog health, keeping deliverables scoped and on time.
Drive effective, safe use of AI tooling across both teams, applying judgment about where it fits.