[Hiring] Senior IT and Security Manager @EA Risk

Role Description

You will own EA Risk’s internal IT services and manage the relationship with a leading outsourced IT provider. The provider will perform much of the operational work, while you will set priorities, coordinate delivery, and ensure services meet the business’s needs.

Initially, you will work closely with the CTO and CISO to establish the security program and strengthen its operating practices. Over time, you will assume greater responsibility for ongoing security leadership, with targeted external expertise where needed.

This is an individual contributor role that combines IT service ownership, security program responsibility, and hands-on work.

Key contributions

• Own the relationship with the outsourced IT provider, including priorities, service performance, escalations, and follow-through.
• Oversee enterprise collaboration, identity, endpoint management, and security services.
• Coordinate support and administration for ERP, CRM, messaging, password management, and other enterprise applications.
• Own effective employee onboarding, role changes, and offboarding, including access and device management.
• Work with the CISO to establish security policies, control ownership, and a prioritized improvement plan.
• Take increasing ownership of the security program, including risk tracking, control reviews, remediation, and leadership reporting.
• Oversee access controls, endpoint protection, vulnerability management, and security monitoring with service providers.
• Coordinate incident response and recovery, including exercises and follow-up improvements.
• Maintain security documentation and evidence to support customer reviews, audits, and applicable compliance requirements.
• Support technology transitions and changes across company offices.
• Use AI and automation to improve IT and security operations while protecting company information.

Qualifications

• Experience owning enterprise IT services and managing external service providers.
• Meaningful hands-on experience with enterprise security, including identity and access management, endpoint security, vulnerability remediation, and incident response.
• The ability to translate security policies and risk assessments into implemented controls and repeatable operating practices.
• Experience with enterprise productivity platforms and their identity, device management, and security capabilities.
• Enough technical depth to troubleshoot directly, evaluate provider recommendations, and verify that issues have been resolved.
• The judgment and initiative to take on broader security leadership as the program matures.
• Clear communication with employees, business leaders, and technical partners.
• Substantial current use of AI tools, with sound judgment about handling company information.
• Experience supporting compliance programs, audit readiness, business continuity, or vendor security reviews is valuable.

Requirements

• Tools you will use include enterprise productivity and collaboration platforms, identity and endpoint management, security monitoring and protection tools, and business applications such as ERP and CRM systems.
• You will work through the outsourced provider where appropriate and directly with systems when needed.

Benefits

• Competitive health benefits: Medical, dental and vision coverage, employer HSA contributions, and more.
• Flexible Time Off: No fixed PTO bank or accrual - take the time you need with manager approval.
• 401(k) match: EA Risk offers a 4% company match, vested immediately.
• 12 paid holidays + leave.
• Paid parental leave: Up to 6 weeks paid, increasing to 8 weeks with 3+ years of service, including birth, adoption, and foster placement.
• This is a remote role.