[Hiring] IT & Security Lead @Frontline Wildfire Defense

Role Description

As Frontline’s IT & Security Lead, you will own IT and cybersecurity for our fully remote workforce. You will run day-to-day IT operations, administer our systems and SaaS tools, manage the full hardware lifecycle, and lead the company’s security program, keeping our team productive and our data protected as we scale. You will report to the VP of Business Operations.

This is a founding IT role. You will be the first dedicated IT professional at Frontline, with significant latitude to build processes, select tools, and establish the security posture of a rapidly growing company. It is a high-ownership individual contributor role: you will set direction and do the work yourself, from resolving a laptop issue in the morning to presenting a security roadmap to leadership in the afternoon. The right person treats security as a core operating discipline, not a compliance checkbox, and sees building something from the ground up as an opportunity.

Key Responsibilities

• IT Operations & Strategy
  • Own IT operations across the organization and serve as the central point of contact for all IT-related needs.
  • Build and scale IT processes, documentation, and SOPs that keep pace with company growth.
  • Own company-wide SaaS governance, keeping user counts, licenses, and access levels accurate across all platforms as headcount grows.
  • Drive cost optimization by identifying redundant tools, right-sizing licenses, and proactively negotiating with vendors.
  • Select and manage external IT vendors and service providers, including SLAs, renewals, and performance.
  • Give leadership hardware forecasts, budget insights, and operational reporting.
  • Recommend and implement tools and process improvements that make teams across the company more productive and secure.
• Security & Compliance
  • Own and evolve the company’s security posture end to end, including risk assessments and remediation planning.
  • Lead the company’s SOC 2 readiness and certification efforts.
  • Establish and enforce a security policy framework, including acceptable use, BYOD, access control, and data classification.
  • Manage identity and access management (IAM) across all platforms, including SSO, MFA, password management, and timely deprovisioning of departing employees.
  • Develop and maintain an incident response plan, and lead response and root cause analysis when issues occur.
  • Lead security audits and vulnerability assessments, and maintain compliance documentation.
  • Evaluate and implement security tooling (e.g., EDR, SIEM, DLP) appropriate for the company’s size and risk profile, and partner with an external managed security provider if needed for monitoring and response.
  • Own endpoint protection and device compliance, and run phishing prevention and security awareness training.
• SaaS, Identity & Collaboration Tools
  • Administer Google Workspace, Slack, and other collaboration platforms.
  • Secure employee access to company systems through identity-based controls, such as SSO, MFA, and device compliance policies.
  • Manage SaaS user permissions and integrations between business tools (e.g., Google Workspace, Slack, and HR systems).
  • Monitor endpoint and SaaS health and proactively identify and resolve potential issues.
  • Own and modernize the company intranet as a central hub for company information, partnering with departments to keep content current and useful.
  • Partner with the Product and Engineering team on shared access and security policies.
• IT Support & Employee Experience
  • Provide responsive, friendly technical support to employees across a fully remote environment, on both Mac and PC.
  • Troubleshoot hardware, software, network, video conferencing, and access issues.
  • Own the ticketing system and make sure requests are resolved promptly.
  • Build a self-service knowledge base for common issues.
  • Own IT onboarding and offboarding, including account provisioning, access management, device setup, and secure decommissioning.
• Hardware & Asset Lifecycle Management
  • Own the full hardware lifecycle: procure, configure, and deploy laptops, mobile phones, and other equipment.
  • Manage devices remotely through mobile device management (MDM) tools, including zero-touch provisioning where possible.
  • Maintain accurate device inventory and asset tracking.
  • Govern third-party asset recovery partners, including retrieval, storage, data wiping, and redeployment.
  • Plan hardware forecasting and refresh cycles.

Qualifications

• 7+ years of experience in IT operations, systems administration, and/or IT security, including experience as the primary owner of IT at a small or mid-sized organization.
• Experience supporting a fully remote workforce.
• Hands-on administration of SaaS and collaboration platforms such as Google Workspace, and Slack.
• Strong knowledge of Windows and macOS environments.
• Experience with MDM tools (e.g., Jamf, Microsoft Intune, or Google endpoint management) for remote device provisioning and compliance.
• Hands-on experience with identity and access management, MFA, endpoint protection, and Zero Trust principles.
• Experience with cybersecurity frameworks such as SOC 2, NIST CSF, or ISO 27001, and with conducting or supporting security audits and risk assessments.
• Experience managing IT vendors and budgets.
• Strong troubleshooting skills and excellent documentation habits.
• Excellent communication skills: approachable, patient, and able to explain technical topics clearly to non-technical colleagues and leadership.
• A proactive, curious mindset, staying current on new tools and taking initiative to improve how teams work.
• Ability to manage multiple priorities independently in a fast-paced environment.

Nice-to-Have

• Experience building an IT function or security program from scratch at a startup or scaling company.
• Experience leading SOC 2 readiness or a SOC 2 Type II audit.
• Security certifications such as CompTIA Security+, CISSP, CISM, or equivalent.
• Experience evaluating or implementing security tooling (EDR, SIEM, DLP) and working with managed security service providers.
• Knowledge of network security and VPN configuration and experience with Microsoft 365 administration.
• Experience building or managing an internal knowledge base.

Benefits

• Competitive Salary Range: $115,000 - 145,000 DOE
• Company-provided cell phone and laptop
• Medical, Dental, and Vision Insurance
• 401(k) retirement plan
• Flexible time off + 14 paid holidays (yes, your birthday is one of them!)
• Work-from-home stipend to support your remote setup
• Remote-first work environment, fostering work-life balance and autonomy
• Company-provided equipment
• Join a high-performing, mission-driven team doing work that truly matters
• And much more!

Join Our Mission!

If you're excited about building technology that protects homes and families from wildfire disasters, we want to hear from you! Apply today and become part of a fast-growing team with purpose and innovation at its core.

Diversity and inclusion are essential values at Frontline. We know we'll do our best and most impactful work when we feel represented, and we belong. We encourage talented people from a wide variety of backgrounds and experiences to apply. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.