[Hiring] IT & Information Security Manager @StarTex Software LLC

Role Description

EHS Insight is looking for an IT & Information Security Manager to own our IT operations in a fully remote, cloud-only environment. This role is responsible for administering our Microsoft 365 tenant, managing endpoint security and device lifecycle for a distributed workforce, enforcing security and compliance standards, and serving as the primary point of contact for all internal IT needs. This position reports to the Chief Executive Officer.

This is a hands-on, single-owner role. You will set the strategy and also do the work:

• Closing tickets
• Imaging and shipping laptops
• Running access reviews
• Writing and enforcing policies

There is no team beneath you and no managed service provider behind you. If that mix appeals to you, you will have unusual latitude to build the function the way you think it should be built.

What You'll Do

• Microsoft 365 & Cloud Identity Administration
  • Administer the Microsoft 365 tenant end to end (Exchange Online, SharePoint, OneDrive, Teams)
  • Own Entra ID: user and group lifecycle, role assignment and privileged access separation, password and account lockout policy, organizational domain verification, and app registrations
  • Manage Microsoft 365 licensing and entitlement, including right-sizing SKUs as headcount changes
  • Support Exchange Online: mail flow, SPF/DKIM/DMARC, quarantine and filtering rules, and mailbox recovery and restore testing
  • Administer Dropbox: sharing controls, external link governance, and periodic access review
• Endpoint & Device Management
  • Administer Intune for device enrollment, compliance policies, and configuration profiles
  • Oversee endpoint security: BitLocker, Defender for Endpoint, and patch/update management via Intune
  • Manage device lifecycle (procurement, shipping logistics for remote employees, retirement/wiping of returned hardware)
  • Govern access from personally owned phones and tablets through Mobile Application Management (MAM)
• Backup, Recovery & Business Continuity
  • Own backup and recovery for all corporate cloud data, including independent third-party backup of Microsoft 365 and Dropbox file data
  • Define, document, and routinely test restore procedures — mailbox-level, file-level, and full-tenant
  • Maintain and annually test the Business Continuity and Disaster Recovery plans for corporate systems
  • Monitor backup jobs, respond to failures, and report on recovery readiness
• Security & Compliance
  • Implement and enforce security policies via Entra ID Conditional Access, Defender for Office 365, and Defender for Endpoint
  • Manage data loss prevention, retention policies, and compliance requirements
  • Monitor security alerts and lead initial incident response
  • Own our response to external audits, customer security questionnaires, and cyber insurance renewals
  • Develop internal IT policies & procedures
  • Drive remediation of findings from our annual third-party cyber risk assessment
  • Deploy and manage web content and DNS filtering across all corporate endpoints
  • Plan and facilitate annual incident response tabletop exercises
• SaaS & Third-Party App Integration
  • Manage SSO integrations between Entra ID and third-party SaaS applications
  • Provision and manage SaaS applications
  • Evaluate, onboard, and manage SaaS vendors and tools used across the org
• AI Systems & Governance
  • Administer the identity layer for our AI platforms
  • Implement technical controls over AI tool usage
  • Enforce acceptable-use and data-sharing policy for AI tools
  • Support our AI governance committee with the approved-tool inventory
• Helpdesk & Remote End-User Support
  • Serve as internal IT support (remote-first support model)
  • Manage onboarding/offboarding processes
  • Troubleshoot Teams, Outlook, and general hardware/software issues
  • Support virtual meeting/AV setup guidance for employees
  • Own the ticket queue day to day
• Vendor & Budget Management
  • Manage relationships with Microsoft, SaaS vendors, and hardware/shipping suppliers
  • Track software licensing costs and identify optimization opportunities
  • Recommend new tools/features within the Microsoft ecosystem
• Strategy & Leadership
  • Develop and maintain IT roadmap aligned with business growth
  • Report IT and security risk posture to leadership

Qualifications

• 5–8+ years of experience administering Microsoft 365 and Entra ID (Azure AD) environments
• Hands-on experience with Intune/Endpoint Manager for device and application management
• Strong understanding of identity security concepts: Conditional Access, MFA, SSO, and least privilege access
• Experience supporting a fully remote workforce and managing distributed device logistics
• Familiarity with Microsoft Defender for security and compliance
• Excellent troubleshooting and communication skills
• Familiarity with ISO/IEC 42001, NIST CSF, or comparable AI and security governance frameworks a plus
• 2+ years in an environment subject to SOC 2, ISO 27001, or comparable external audit
• Demonstrated ownership of backup and recovery for cloud-hosted data
• Experience managing identity for SaaS and AI platforms
• Genuinely comfortable with unglamorous work

Preferred Certifications

• MS-102: Microsoft 365 Administrator
• SC-300: Microsoft Identity and Access Administrator
• MD-102: Endpoint Administrator
• SC-200: Microsoft Security Operations Analyst
• AZ-500: Azure Security Engineer Associate (or equivalent security depth)

Compensation

Annual base salary of $135,000–$170,000, based on relevant experience and qualifications.

Benefits

• Flexible PTO
• Six weeks of paid parental leave for exempt, full-time employees
• Medical, dental and vision coverage — including an employee-only medical option with premiums fully paid by the company
• Teladoc virtual healthcare services
• Employer-paid short-term and long-term disability coverage
• Employer-paid life insurance
• 401(k) with employer match
• Access to legal services and additional voluntary benefits
• Fully remote work environment

Equal Opportunity Employer

EHS Insight, a StarTex Software brand, is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.