IT, Security, and Compliance Manager

The role

The IT, Security & Compliance Manager will own and build systems, processes, and programs for IT operations, information security, compliance, risk management, and vendor management. This role involves establishing technology controls and security practices to support company scaling.

What you will do

• Own day-to-day IT operations including systems, applications, access management, devices, identity, and employee technology.
• Develop and maintain information security program, policies, standards, and controls.
• Own security and compliance readiness and identify appropriate certifications and frameworks.
• Develop and manage a roadmap for certifications such as SOC 2, ISO 27001, or other relevant standards.
• Partner with engineering and infrastructure teams to ensure security controls, monitoring, and access management.
• Manage employee identity and access management including onboarding, offboarding, and periodic access reviews.
• Establish and maintain security policies covering access control, acceptable use, data protection, incident response, and vendor risk.
• Own or coordinate security audits, assessments, penetration tests, and compliance reviews.
• Develop and maintain an effective incident response and security escalation process.
• Manage technology and security vendors including selection, evaluation, contracts, and renewals.

Required qualifications

• 5+ years of experience across IT, information security, GRC, compliance, or a related field.
• Experience owning or significantly contributing to IT and security programs within a startup or high-growth technology company.
• Strong understanding of security frameworks, controls, risk management, and compliance requirements.
• Experience building security and compliance programs from the ground up.
• Familiarity with SOC 2, ISO 27001, GDPR, CCPA/CPRA, and other relevant security and privacy frameworks.
• Experience managing security audits and certification processes.
• Strong experience with identity and access management, SaaS administration, endpoint security, and IT operations.
• Experience evaluating and managing IT and security vendors.
• Ability to assess the company’s needs and determine appropriate security certifications and compliance standards.
• Strong organizational and project management skills.
• Excellent communication skills.
• Comfortable operating independently and building processes where they don’t yet exist.

Nice to have

• Experience leading SOC 2 Type II or ISO 27001 certification efforts from planning through completion.
• Experience working in a consumer technology, gaming, social, livestreaming, or SaaS environment.
• Supporting companies through rapid growth and increasing security or compliance requirements.
• Familiarity with cloud environments such as AWS or GCP.
• Experience with security and IT tools across identity, endpoint management, vulnerability management, SIEM, and compliance management.
• Experience establishing a security program at a company that previously had limited formal security infrastructure.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or Security+
• A pragmatic approach to security

Benefits

• Unlimited PTO
• 401(k) plan
• Comprehensive health insurance
• Paid company holidays
• Competitive salary

About the company

fav is a platform where digital communities connect, engage, and play, empowering creators by enhancing audience participation. The work culture is intense and values open, respectful communication and real-time feedback.