Senior IT & Business Continuity Manager

Senior It & Business Continuity Manager

We're looking for a hands-on, solutions-oriented Senior It & Business Continuity Manager to own Givebutter's It operations and compliance program and become a true operational partner across the business. As our first in-house It hire, you'll report to our VP of Engineering and work closely with our Sr. Platform Engineering Manager, and our Chief of Staff and our People team to ensure every Butter Slice has the tools, access, and support they need to do their best work.

This role has a clear scope: approximately 70% It operations (device management, SaaS administration, identity lifecycle, onboarding/offboarding) and 30% Grc and compliance project management. We're also hiring a dedicated Security Engineer who will own the technical security posture of our production systems — cloud infrastructure hardening, fraud prevention, and incident response. Your lane is the It and Grc layer: keeping the business tooled up, access controls clean, and our compliance certifications (Soc 2, Iso 27001, and Pci) moving forward through Vanta, our Grc platform.

We want to hear from people who…

• Take ownership and love building from zero. You're energized by creating structure where none exists and setting a strong foundation for scale.
• Are deeply curious and proactive. You don't wait for problems to surface; you anticipate needs and continuously improve systems and processes.
• Balance security with usability. You care about protecting the business but also understand how to keep tools fast, accessible, and frictionless for teammates.
• Communicate clearly and empathetically. You can translate technical concepts into plain language and build trust across all levels of the company.
• Embrace new technology thoughtfully, especially Ai, and are excited to help teams adopt tools responsibly while maximizing their impact.
• Can meet anyone where they are whether you're talking to an engineer or an account executive, you make the technical stuff land.

Responsibilities

• Own all It operations end-to-end: device procurement & management, SaaS administration, and identity & access management.
• Administer our Mobile Device Management (Mdm) platform and maintain a healthy, secure fleet of Mac and Windows devices.
• Manage core business tools like Google Workspace, Slack, Notion, 1
  
  Password, and more — and evaluate new ones as we grow.
• Lead It onboarding and offboarding so every new hire has a great Day 1 (and every departure is handled cleanly).
• Own our Notion workspace as a core It system: manage permissions and access controls, maintain structural integrity as we scale, and partner with teams to ensure it stays organized, useful, and secure.
• Stay ahead of Ai tooling: evaluate, pilot, and govern Ai tools across the business, establish guardrails for responsible use, manage access, and help teammates get the most out of tools like Claude, Cursor, Chatgpt, and others as they enter our stack.
• Build and maintain It documentation and self-service resources that actually empower teammates to help themselves.
• Implement and maintain It security fundamentals in close partnership with the Security Engineer: endpoint protection, Mfa enforcement, and access controls — you own the It and SaaS layer; the Security Engineer owns the production and cloud security layer.
• Own Vanta, our Grc platform — manage our compliance posture, track controls, coordinate evidence collection, and project manage our Soc 2, Iso 27001, and Pci certification programs end-to-end.
• Manage our current third-party It partner (Mann) while building toward transitioning support in-house over time.
• Serve as the go-to for troubleshooting and support, not as a ticket-closer, but as a genuine partner to the team.
• Think proactively: identify gaps before they become problems and build the infrastructure for where we're going, not just where we are.

Requirements

• 5+ years of It experience, ideally at a high-growth startup or remote-first SaaS or fintech company.
• Proven ability to build from scratch — you don't need a playbook to get started, and you know how to prioritize in ambiguous environments.
• Hands-on experience with a Grc tool — Vanta strongly preferred;
  Drata…