Director, IT & Security

Stepful
New York
Workplace: HybridFull timeUSD 200,000 - 250,000 annuallyFunction: Executive & General ManagementExperience: 8+ yearsSkills: ["Communication","Vendor management","Strategic leadership","Hands-on execution","Builder mindset"]

Build Stepful’s IT and security function from scratch as a hands-on leader. Drive the full SOC 2 Type I/II program from readiness through audit and ongoing compliance, including identity and access management, least-privilege controls (SSO, MFA, access reviews), and vendor/customer security questionnaire support. Own IT operations end-to-end—equipment lifecycle, MDM deployment, inventory, SaaS provisioning and governance—and partner with Engineering on incident response and endpoint/infrastructure hardening. Hybrid in NYC, with plans to grow the team.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Stepful
Stepful
1 month ago

Director, IT & Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Build Stepful’s IT and security function from scratch as a hands-on leader. Drive the full SOC 2 Type I/II program from readiness through audit and ongoing compliance, including identity and access management, least-privilege controls (SSO, MFA, access reviews), and vendor/customer security questionnaire support. Own IT operations end-to-end—equipment lifecycle, MDM deployment, inventory, SaaS provisioning and governance—and partner with Engineering on incident response and endpoint/infrastructure hardening. Hybrid in NYC, with plans to grow the team.
Location: New York
Workplace: Hybrid
Employment Type: Full time
Job Function: Executive & General Management
Seniority: Director level

Key Responsibilities

  • •Own Stepful’s security program end to end and lead the SOC 2 effort from readiness through audit and ongoing compliance.
  • •Define and enforce security policies, identity and access management, and least-privilege controls (SSO, MFA, access reviews).
  • •Own IT operations including the full equipment lifecycle (procurement, MDM deployment, inventory, onboarding/offboarding).
  • •Manage the SaaS application stack with provisioning, access governance, vendor security reviews, and spend optimization.
  • •Serve as the escalation point for day-to-day IT needs, build scalable IT support processes, and partner with Engineering on incident response, endpoint security, and infrastructure hardening.

Pay and Benefits

Salary: USD 200,000 - 250,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVision401kFsaHsaCommuter BenefitsPaid Leave

Key Requirements

  • •8+ years of IT experience, including leading IT or security functions at a high-growth startup.
  • •Hands-on experience driving SOC 2 certification (Type I and II) from readiness through audit.
  • •Deep expertise with modern IT/security stack including MDM (e.g., Kandji, Jamf), identity providers (e.g., Okta, Google Workspace), and endpoint security tooling.
  • •Ability to operate as both a strategic leader and a hands-on individual contributor.
  • •Strong vendor management skills across hardware, software, and audit partners.
Experience:8+ years
Skills:CommunicationVendor managementStrategic leadershipHands-on executionBuilder mindset
Tech Stack:SOC 2MDMKandjiJamfOktaGoogle WorkspaceSSOMFAEndpoint securityIdentity and access management

Company Brief

Stepful
Stepful provides a digital platform offering tools for habit formation, goal setting, and small daily actions to help users improve productivity, wellbeing, and long-term personal development through structured routines and tracking features.
Industry: Wellness & Preventive Health
Website