Head of IT

Overview

Osmo is a digital olfaction company solving problems at the intersection of AI/ML and automation. Osmo is scaling rapidly and seeks a hands-on IT leader to own infrastructure, security, endpoint management, identity, vendor management, and the employee IT experience. The role requires startup-speed execution with a Series-B level of discipline: clear deliverables, strong documentation, reliable execution, and measurable SLAs. Osmo is headquartered in New York, NY, with a facility in New Jersey and offices in Somerville, MA.

You will be the owner for Osmo’s workplace IT and security operations. You’ll own the IT roadmap, vendor relationships (SaaS, MDM, identity, security), incident response, asset lifecycle, and a high-quality employee support experience. You will be expected to be both strategic (roadmaps, budgeting, compliance) and tactical (hands-on implementation, troubleshooting), and to communicate clearly with the executive team.

• Operational ownership: day-to-day IT operations including identity and access management (SSO/MFA), device lifecycle and MDM, endpoint security, network, backups, and remote-work tooling.
• Maintain and improve an employee-facing IT service model (ticketing, SLAs, knowledge base, onboarding/offboarding).
• Security & compliance: implement and maintain baseline security controls (MFA, patching, least privilege, phishing defenses, logging/monitoring).
• Lead incident response, forensics and remediation; create runbooks and playbooks.
• Prepare the company for audits or investor/partner security reviews; implement risk reduction projects.
• Guard digital assets with a comprehensive cybersecurity strategy.
• Vendor & contract management: own relationships and contracts with critical vendors (Okta/SSO, MDM, endpoint/EDR, cloud providers, SaaS procurement); negotiate pricing and drive cost optimization and SLAs.
• Manage outsourced IT partners and contractors; ensure high quality deliverables and transparency.
• Infrastructure & cloud: coordinate with engineering on cloud identity, network segmentation and secure access patterns; partner with engineering/devops where responsibilities overlap; own on-prem or hybrid infrastructure or cloud spend & lifecycle if fully cloud.
• Process, documentation & governance: build and enforce IT policies (acceptable use, device policy, BYOD, password/credential standards); deliver up-to-date documentation (asset inventory, runbooks, onboarding/offboarding checklists, project plans); establish measurable KPIs (ticket response/resolution times, patch compliance, uptime SLAs, time to onboard, incident MTTR).
• People & communication: initially an individual contributor with a path to building a team as Osmo scales; communicate clearly to executives and non-technical staff with concise status reports, risk summaries, and roadmap updates.

• Deliver a 30/60/90 day plan including top 10 critical risks and remediations.
• Implement an authoritative IT asset & identity inventory.
• Establish ticketing SLAs and reduce ticket backlog by a measurable amount (e.g., 50%).
• Implement or improve an MDM + SSO baseline and resolve high-risk issues (unpatched endpoints, overly permissive access).
• Provide a security & continuity roadmap, including vendor consolidation or cost reductions.

• 7+ years in IT roles with progressive responsibility; 3+ years leading IT teams or owning IT for a scaling company.
• Proven track record at Series-B or similarly fast-growing startups (or vendor side supporting startups).
• Hands-on experience with SSO/IdP (Okta or similar), MDM (Jamf, Intune, Kandji), endpoint security/EDR, device provisioning and lifecycle.
• Familiarity with cloud provider platforms (AWS/GCP/Azure), networking fundamentals and secure access patterns.
• Strong vendor management and contract negotiation experience.
• Demonstrated ability to deliver consistent, high-quality work and documentation under tight timelines.
• Excellent written and verbal communication — able to explain technical risk and project status to executives.
• Experience with incident response, security controls and risk reduction.
• Comfortable being…