Senior IT & Business Continuity Manager

Responsibilities

• Own all IT operations end-to-end: device procurement & management, SaaS administration, and identity & access management.
• Administer our Mobile Device Management (MDM) platform and maintain a healthy, secure fleet of Mac and Windows devices.
• Manage core business tools like Google Workspace, Slack, Notion, 1Password, and more — and evaluate new ones as we grow.
• Lead IT onboarding and offboarding so every new hire has a great Day 1 (and every departure is handled cleanly).
• Own our Notion workspace as a core IT system: manage permissions and access controls, maintain structural integrity as we scale, and partner with teams to ensure it stays organized, useful, and secure.
• Stay ahead of AI tooling: evaluate, pilot, and govern AI tools across the business, establish guardrails for responsible use, manage access, and help teammates get the most out of tools like Claude, Cursor, ChatGPT, and others as they enter our stack.
• Build and maintain IT documentation and self-service resources that actually empower teammates to help themselves.
• Implement and maintain IT security fundamentals in close partnership with the Security Engineer: endpoint protection, MFA enforcement, and access controls — you own the IT and SaaS layer; the Security Engineer owns the production and cloud security layer.
• Own Vanta, our GRC platform — manage our compliance posture, track controls, coordinate evidence collection, and project manage our SOC 2, ISO 27001, and PCI certification programs end-to-end.
• Manage our current third-party IT partner (Mann) while building toward transitioning support in-house over time.
• Serve as the go-to for troubleshooting and support, not as a ticket-closer, but as a genuine partner to the team.
• Think proactively: identify gaps before they become problems and build the infrastructure for where we're going, not just where we are.

Requirements

• 5+ years of IT experience, ideally at a high-growth startup or remote-first SaaS or fintech company.
• Proven ability to build from scratch — you don't need a playbook to get started, and you know how to prioritize in ambiguous environments.
• Hands-on experience with a GRC tool — Vanta strongly preferred; Drata or similar is acceptable. You've project-managed a compliance audit, not just supported one.
• Familiarity with SOC 2 and at least one of ISO 27001 or PCI DSS — the three certifications we're targeting over the next year or two.
• Strong project management instincts — you know how to keep a compliance program on track without it becoming a fire drill at audit time.
• Hands-on experience administering Notion at scale — including permissions management, workspace governance, and working cross-functionally to keep it structured and useful.
• Familiarity with AI tools and how they're being adopted in the workplace — you understand the productivity upside and the security/compliance considerations that come with them.
• Strong communicator who can translate technical concepts without making anyone feel out of the loop.
• Security-minded and pragmatic — you understand the tradeoffs and make smart, practical decisions (note: deep technical security expertise lives with the Security Engineer; this role partners, not leads, on that front).
• Experience managing a Mac-heavy, fully remote team and the SaaS stack that comes with it.
• Someone who genuinely cares about the people they support, not just the tickets they close.