Lead, IT, DevOps & Security

The Mission

Intouch Insight is scaling its security and compliance program, and we are hiring a technical leader to own it. As Lead, IT, Dev Ops & Security, you will lead the execution and expansion of our SOC 2 program - extending it beyond Security to add the Confidentiality and Availability Trust Services Criteria - while owning all of IT infrastructure, Dev Ops, and security across the company.

You treat IT and compliance as engineering problems — "compliance as code," "IT stack as code" — building automated, auditable systems rather than managing from a distance.

This is a hands-on, player-coach role. You will personally do much of the implementation — building the automated controls, infrastructure, and security tooling yourself — while also leading a small team (IT and Dev Ops), setting the roadmap, and acting as the company's owner of security and compliance as we grow toward our next revenue milestone and serve a larger enterprise customer base.

Roughly the majority of your time is spent building; the rest is leading, planning, and owning outcomes.

• Own and expand the SOC 2 program (primary focus).
• Own our SOC 2 Type 2 program - already running in Vanta - and lead its expansion beyond the Security baseline to add the Confidentiality and Availability Trust Services Criteria. Design and operationalize the new controls (e.g. data classification and handling, encryption and access controls for confidential data; capacity, backup, disaster-recovery, and uptime monitoring for availability), map them into Vanta, and keep evidence collection continuous and audit-ready.
  
  Own the auditor relationship and drive toward zero critical findings.
• Lead security engineering. Set IT and information-security policy, run vulnerability management and remediation, and lead incident detection, alerting, and response - all through an automation-first lens. Champion security best practices across the organization.
• Lead the team (as a player-coach). Manage and develop the IT and Dev Ops staff, set expectations and growth paths, and be the decision-maker and escalation point the team relies on - while staying deep in the work yourself rather than managing from a distance.
• Own Dev Ops across product and corporate. Oversee product/platform Dev Ops (CI/CD, application infrastructure, deployment pipelines supporting the engineering team) as well as corporate infrastructure and identity.
• Run IT as code. Use Terraform to manage and provision cloud identity and security infrastructure for a reproducible, scalable environment. Administer and secure a mixed Windows/macOS fleet with Microsoft Intune and Jamf; automate device enrollment, patching, and configuration.
• Own identity & access. Secure and automate the user lifecycle across Microsoft Entra  Google Workspace.
• Set strategy. Develop and own the IT, Dev Ops, and security roadmap aligned to business goals; manage the operational budget and vendor relationships.

• SOC 2 leadership. Demonstrable experience leading or substantially driving SOC 2 Type 2 programs - ideally including adding Trust Services Criteria (Confidentiality, Availability) to an existing scope. Hands‑on experience with a compliance automation platform (Vanta or similar) is a strong asset.
• People leadership. Experience managing a team (IT, Dev Ops, and/or security), setting direction, and developing people - or a strong senior/lead ready to step up, with the judgment to be an accountable decision-maker.
• Security depth. Hands‑on background in IT/security engineering: policy, vulnerability management, incident response, and modern detection/alerting.
• The Dev Ops mindset. Proven use of Terraform (or equivalent IaC) to manage cloud IAM, especially Microsoft Entra ; comfort across product and corporate Dev Ops.
• Communication. Able to articulate security and technology strategy to both technical teams and executive leadership.

• Modern endpoint expertise. Securing Windows (Intune) and macOS (Jamf) fleets.
• Platform breadth. Hands‑on administration of Microsoft Entra  Google Workspace in a corporate setting.

• A successfully expanded SOC 2 program:
  Confidentiality and…