Lead, IT, DevOps and Security

Intouch Insight is scaling its security and compliance program, and we are hiring a technical leader to own it. As Lead, IT, Dev Ops & Security, you will lead the execution and expansion of our SOC 2 program - extending it beyond Security to add the Confidentiality and Availability Trust Services Criteria - while owning all of IT infrastructure, Dev Ops, and security across the company.

You treat IT and compliance as engineering problems - "compliance as code," "IT stack as code" - building automated, auditable systems rather than managing from a distance.

This is a hands-on, player-coach role. You will personally do much of the implementation - building the automated controls, infrastructure, and security tooling yourself - while also leading a small team (IT and Dev Ops), setting the roadmap, and acting as the company's owner of security and compliance as we grow toward our next revenue milestone and serve a larger enterprise customer base.

Roughly the majority of your time is spent building; the rest is leading, planning, and owning outcomes.

Own and expand the SOC 2 program (primary focus). Own our SOC 2 Type 2 program - already running in Vanta - and lead its expansion beyond the Security baseline to add the Confidentiality and Availability Trust Services Criteria. Design and operationalize the new controls (e.g. data classification and handling, encryption and access controls for confidential data; capacity, backup, disaster-recovery, and uptime monitoring for availability), map them into Vanta, and keep evidence collection continuous and audit-ready.

Own the auditor relationship and drive toward zero critical findings.

Lead security engineering. Set IT and information-security policy, run vulnerability management and remediation, and lead incident detection, alerting, and response - all through an automation-first lens. Champion security best practices across the organization.

Lead the team (as a player-coach). Manage and develop the IT and Dev Ops staff, set expectations and growth paths, and be the decision-maker and escalation point the team relies on - while staying deep in the work yourself rather than managing from a distance.

Own Dev Ops across product and corporate. Oversee product/platform Dev Ops (CI/CD, application infrastructure, deployment pipelines supporting the engineering team) as well as corporate infrastructure and identity.

Run IT as code. Use Terraform to manage and provision cloud identity and security infrastructure for a reproducible, scalable environment. Administer and secure a mixed Windows/macOS fleet with Microsoft Intune and Jamf; automate device enrollment, patching, and configuration.

Own identity & access. Secure and automate the user lifecycle across Microsoft Entra  Google Workspace.

Set strategy. Develop and own the IT, Dev Ops, and security roadmap aligned to business goals; manage the operational budget and vendor relationships.

• SOC 2 leadership. Demonstrable experience leading or substantially driving SOC 2 Type 2 programs - ideally including adding Trust Services Criteria (Confidentiality, Availability) to an existing scope. Hands-on experience with a compliance automation platform (Vanta or similar) is a strong asset.
• People leadership. Experience managing a team (IT, Dev Ops, and/or security), setting direction, and developing people - or a strong senior/lead ready to step up, with the judgment to be an accountable decision-maker.
• Security depth. Hands-on background in IT/security engineering: policy, vulnerability management, incident response, and modern detection/alerting.
• The Dev Ops mindset. Proven use of Terraform (or equivalent IaC) to manage cloud IAM, especially Microsoft Entra ; comfort across product and corporate Dev Ops.
• Communication. Able to articulate security and technology strategy to both technical teams and executive leadership.

• Modern endpoint expertise. Securing Windows (Intune) and macOS (Jamf) fleets.
• Platform breadth. Hands-on administration of Microsoft Entra  Google Workspace in a corporate setting.

• A successfully expanded SOC 2 program: Confidentiality and Availability criteria added to the audit scope and brought under continuous, automated compliance with zero critical findings.
• Security posture: reduced risk through automated detection, timely remediation, and enforced policy.
• Team capability: a well-run, growing IT/Dev Ops function with clear ownership and development.
• Reliability & efficiency: high uptime of critical infrastructure and reduced manual overhead through automation

Hybrid to us means you primarily work from home, with no more than 1 day per week in our Kanata office if you live within range.

Intouch Insight is a growing technology and managed services company with headquarters in Ottawa, Canada. We take great pride in the Customer Experience ecosystem we’ve created, allowing us to be at the forefront of innovation and driving…