Note: The job is a remote job and is open to candidates in USA. Fabric is a healthcare technology company handling protected health information at scale in a regulated environment. The Manager of Security and IT will lead security operations, corporate IT, compliance support, incident response, and the development of AI-driven automation while managing and mentoring a small team.
Responsibilities
- Lead Fabric's security program across application security, security operations, identity and access management, endpoint security, cloud security, and vendor security
- Own incident response end-to-end, covering detection, triage, response, post-mortems, and the structural improvements that follow
- Lead customer security questionnaire responses and vendor security reviews, acting as a credible authority who can speak to a CISO at a health system and earn their trust
- Set security policies and standards that engineering, product, and operations can practically follow
- Represent security in executive conversations about risk, investment, and technical tradeoffs
- Own corporate IT operations, including the identity platform (Okta or equivalent), MDM, endpoint management, helpdesk, hardware, and SaaS provisioning
- Build and deploy custom AI tools, agents, and automated workflows to scale IT and security operations, moving beyond standard vendor defaults
- Manage and mentor a team of three direct reports, helping them grow their careers and empowering them to integrate AI into their daily workflows
- Partner with the owner of our compliance program to feed evidence, implement controls, and operationalize SOC2, HITRUST, and HIPAA requirements without bottlenecking either side
Skills
- 7+ years of security experience with at least 2 years in a security leadership or management role
- Direct experience managing corporate IT operations, including identity, endpoint, MDM, SaaS provisioning, and the helpdesk
- Proven application security or cloud security background
- Experience operating in a healthcare or highly regulated industry environment handling PHI under HIPAA
- Working knowledge of SOC2 and HIPAA frameworks
- Management experience overseeing 1 to 3 direct reports
- Proven track record of building and deploying custom AI tools, agents, or automated workflows to streamline IT and security operations
- HITRUST familiarity
- Ideally including building a function from a small base and actively guiding career development
- Hands-on experience with Okta or another modern IAM/SSO platform
- AWS or GCP cloud security depth
- Prior incident response leadership at a healthcare or regulated company
- HITRUST or NIST 800-66 specific familiarity
- Experience working with external auditors and assessors
Benefits
- Medical
- Dental
- Vision
- Unlimited PTO
- A 401(k) plan
- Stock options
- Bonuses
- Remote work
Company Overview
Company H1B Sponsorship