Want to know if this job is worth applying to?
San Francisco, California, United States
Onsite
IT & Security Manager
San Francisco, CA · In Person · Full-Time
About Vizcom:
At Vizcom, we’re reimagining how physical products are designed by fusing AI with human creativity to help designers move from sketch to reality at lightning speed. We’re building AI-powered sketching and collaboration tools that make designing feel as natural as drawing and as powerful as imagining something into existence. We’re a small, fast-moving team that values initiative, experimentation, collaboration, and an eye for beauty.
The Role:
As the IT & Security Manager, you’ll own Vizcom’s day-to-day IT function and the operational execution of our security program, helping build the systems, processes, and infrastructure that support our growing team.
You’ll be the primary point of contact for employee IT needs and manage everything from identity and access management to SaaS administration, device management, troubleshooting, endpoint security, and IT security operations.
This is a hands-on role for someone who enjoys solving problems, creating order, and building scalable processes. You’ll report to the Head of People and work closely with our Senior Manager, Compliance & Trust, who will provide functional direction on security and compliance priorities. You’ll also partner with Engineering and teams across Vizcom to make sure employees have the access, tools, and support they need while keeping our systems secure and well managed.
We’re not looking for someone to build a large IT organization or introduce unnecessary enterprise complexity. We’re looking for a strong operator who can own the work, improve how we do it, and build an IT and security operations foundation that can scale with us.
How You’ll Do It:
Serve as the primary point of contact and owner for day-to-day employee IT support across macOS, Windows, mobile devices, SaaS applications, peripherals, conference room technology, and workplace connectivity
Own Tier 1 and Tier 2 support from intake through resolution, including login and MFA issues, application errors, VPN and connectivity problems, device performance, and peripherals
Establish a simple, effective process for employees to request IT support and create clear expectations around response and resolution times
Escalate issues to vendors, Engineering, or other technical owners when appropriate, providing the troubleshooting, reproduction steps, and logs needed to resolve them efficiently
Own employee account creation, access changes, and deactivation across company systems
Manage identity and access, including SSO, MFA, permissions, role-based access, privileged access, and regular access reviews
Administer core employee systems and SaaS applications, including Google Workspace, Slack, password management, and other company-wide tools
Apply least-privilege principles to provisioning and access management and regularly identify stale accounts, unnecessary permissions, and standing administrative access
Own device management, including MDM, endpoint security, encryption, patching, software deployment, updates, remote wipe capabilities, and device compliance
Manage the ongoing lifecycle of company hardware, including inventory, troubleshooting, repairs, replacements, warranties, recovery, retirement, and secure disposal
Partner with People on employee onboarding and offboarding, owning the technical and security components of the employee lifecycle, including accounts, permissions, device configuration, software, access removal, session and credential revocation, and hardware recovery
Work closely with the Senior Manager, Compliance & Trust to operationalize security requirements and maintain relevant technical security controls
Monitor and triage EDR and security alerts, investigate detections, identify false positives, and escalate confirmed or potentially significant incidents to the appropriate security owner
Tune security alerts and suppression rules where appropriate to reduce recurring noise and improve the effectiveness of monitoring
Serve as a first responder for endpoint security incidents, including isolating devices, collecting relevant artifacts, preserving evidence, and documenting actions taken
Participate in incident response exercises and post-incident reviews and help turn findings into concrete operational improvements
Support SOC 2, ISO 27001, cyber insurance, customer security reviews, and other compliance initiatives by producing and maintaining technical evidence such as asset inventories, endpoint coverage, patching records, access reviews, and device compliance records
Maintain accurate documentation of systems, administrative ownership, configurations, vendors, security controls, processes, and recovery procedures
Ensure critical systems have appropriate administrative redundancy and are not dependent on a single employee for access or institutional knowledge
Manage IT and security vendors, software licenses, warranties, and related operational expenses
Regularly review SaaS usage and licenses to identify unused accounts, unnecessary tools, unsanctioned software, and opportunities to consolidate or reduce spend
Package and deploy applications and identify opportunities to automate repetitive IT processes or create employee self-service where appropriate
Develop and maintain useful documentation and self-service resources for recurring employee IT issues
Assess our current IT and endpoint security environment and develop practical recommendations for improving our systems and processes as the company continues to scale
Build solutions that meet our needs today while avoiding unnecessary complexity or enterprise-level infrastructure that does not make sense for our stage
What You’ll Bring:
3–5 years of experience in IT, IT Operations, Systems Administration, Security Operations, or a similar hands-on technical role, including meaningful hands-on responsibility for security
Experience significantly contributing to internal IT operations within a growing organization, ideally within a startup or technology company
Strong experience supporting macOS in a managed environment
Strong experience with identity and access management, including SSO, MFA, user provisioning, permissions, role-based access, privileged access, and access controls
Experience administering Google Workspace, Slack, password management, and other SaaS tools commonly used within technology companies
Hands-on experience with an MDM or endpoint management platform such as Kandji, Jamf, Intune, or Workspace ONE, including building and deploying policies
Experience working with EDR or other endpoint security tooling, including reviewing detections, understanding process activity, and isolating endpoints
Working knowledge of security fundamentals, including least-privilege access, endpoint security, encryption, patching, secure employee offboarding, and incident response
Working knowledge of networking fundamentals, including DNS, DHCP, TCP/IP, VPNs, and the ability to distinguish network issues from device or application issues
Experience working within a ticketing system and managing support requests against defined response and resolution expectations
Strong troubleshooting skills and the ability to independently investigate and resolve employee hardware, software, account, access, and endpoint issues
A systems-oriented mindset with an ability to turn informal or fragmented processes into clear, repeatable workflows
Strong organizational and documentation skills with attention to the operational details that keep systems reliable and secure
Excellent written and verbal communication skills, including the ability to document technical issues and security incidents clearly for both technical and non-technical audiences
A service-oriented and patient approach to supporting employees with varying levels of technical proficiency
Strong judgment and the ability to prioritize between employee support issues, security alerts, and longer-term operational projects
Comfort working independently and taking ownership of problems from identification through resolution
Good judgment about when to solve something yourself, when to automate it, and when to escalate or bring in outside expertise
High degree of discretion and confidentiality given the systems, security information, and employee data this role will have access to
As a colleague, you enjoy planning, executing, winning and celebrating as a team
Experience working remotely and/or in a startup environment
Bonus Points:
Experience supporting an organization operating under SOC 2 or ISO 27001 requirements
Experience gathering technical evidence for audits, cyber insurance questionnaires, or customer security reviews
Familiarity with AWS, Azure, or GCP, particularly at the identity and logging level
Experience participating in security incident response, tabletop exercises, or post-incident reviews
Experience managing IT or security vendors, hardware lifecycle programs, and SaaS licensing
Benefits While Working At Vizcom:
100% employer sponsored medical care for employees, 25% towards dependents
Dental, Vision and Mental Health Care
Equity
Flexible PTO
401(k) with payroll match
Generous annual Learning & Development allowance
Paid parental leave
Weekly catered lunch at Headquarters Tues - Thurs
Monthly stipend for gym membership
Compensation:
Our compensation is tiered by U.S. location to support a consistent and equitable approach across our distributed team. We regularly benchmark compensation against relevant peer companies using current market data from industry-standard sources, including Carta and Pave. For this role, base salary and equity will be determined based on your location and applicable compensation zone:
Base salary: $157,000 - $186,000 + Equity
The actual offer, including the compensation package, is determined based on multiple factors, including experience, location, and other business considerations. The overall package described in this post applies to W2, U.S.-based employees. Final package will be determined by local requirements, employment laws, and accessibility.
*Please note, as part of our SOC2 Type 2 compliance, all employees are required to submit to a background check.
Join Us and Make an Impact: At Vizcom, we move fast, offer meaningful equity ownership, and provide a compelling growth trajectory for our team members. We believe in the art of industrial design and strive to improve our world through accelerated visionary processes. Join us in shaping a world designed by you.
