IT & Security Administrator

Description:

IT Administration + GRC Specialist
Requirements: 5+ years in IT Administration, IT Governance, Risk Management, or Compliance; IT/Security Policy
- Must have hands on experience with Vanta for compliance, and really understand the automation side and integration side
 

We're a high-growth cloud infrastructure company powering AI/ML workloads with GPU clusters, high-speed networking, and scalable storage. Our platform supports researchers, engineers, and enterprises with performance, reliability, and affordability at scale.

We're currently experiencing MASSIVE GROWTH... Our revenue grew over 95% in the last YEAR! We have made several acquisitions and formed several partnerships during this period of growth, and we need YOUR HELP to keep it going...

We're hiring a versatile, security-minded IT GRC Specialist to join our Information Security Operations Center. This role will own policy definition and implementation while supporting compliance, audit readiness, and security operations.

What you'll do:

• Define, implement, and maintain IT and security policies aligned with compliance frameworks (SOX, SOC, NIST, ISO 2700X, etc.)
• Assist in developing and executing the IT compliance program for customer environments
• Lead our IT administration initiatives
• Collaborate with cross-functional teams and external auditors to ensure regulatory compliance
• Evaluate and improve security controls, processes, and documentation

What we're looking for:

• 5+ years in IT Administration, IT Governance, Risk Management, GRC or Compliance
• Proven experience defining and implementing IT/security policy
• Experience with 3rd party vulnerability scanning
• Experience with data center information management platforms

Would be ideal if you had experience with:

• Experience with data center information management platforms
• Background working with SaaS or software engineering teams
• integrating GRC platforms with other tools that don't have integrations today
• Implementing workflows such as approval and access requests
• CISA, CRISC, or CGEIT certification (or in progress)
• Familiarity with one or more frameworks: ISO 2700X, ITIL, NIST