IT & Security Manager

• IT & Security Manager
• San Francisco, CA · In Person · Full-Time

About Vizcom:

At Vizcom, we’re reimagining how physical products are designed by fusing AI with human creativity to help designers move from sketch to reality at lightning speed. We’re building AI-powered sketching and collaboration tools that make designing feel as natural as drawing and as powerful as imagining something into existence. We’re a small, fast-moving team that values initiative, experimentation, collaboration, and an eye for beauty.

The Role:

As the IT & Security Manager , you’ll own Vizcom’s day-to-day IT function and the operational execution of our security program, helping build the systems, processes, and infrastructure that support our growing team.

You’ll be the primary point of contact for employee IT needs and manage everything from identity and access management to SaaS administration, device management, troubleshooting, endpoint security, and IT security operations.

This is a hands-on role for someone who enjoys solving problems, creating order, and building scalable processes. You’ll report to the Head of People and work closely with our Senior Manager, Compliance & Trust, who will provide functional direction on security and compliance priorities. You’ll also partner with Engineering and teams across Vizcom to make sure employees have the access, tools, and support they need while keeping our systems secure and well managed.

We’re not looking for someone to build a large IT organization or introduce unnecessary enterprise complexity. We’re looking for a strong operator who can own the work, improve how we do it, and build an IT and security operations foundation that can scale with us.

How You’ll Do It:

Serve as the primary point of contact and owner for day-to-day employee IT support across macOS, Windows, mobile devices, SaaS applications, peripherals, conference room technology, and workplace connectivity

Own Tier 1 and Tier 2 support from intake through resolution, including login and MFA issues, application errors, VPN and connectivity problems, device performance, and peripherals

Establish a simple, effective process for employees to request IT support and create clear expectations around response and resolution times

Escalate issues to vendors, Engineering, or other technical owners when appropriate, providing the troubleshooting, reproduction steps, and logs needed to resolve them efficiently

Own employee account creation, access changes, and deactivation across company systems

Manage identity and access, including SSO, MFA, permissions, role-based access, privileged access, and regular access reviews

Administer core employee systems and SaaS applications, including Google Workspace, Slack, password management, and other company-wide tools

Apply least-privilege principles to provisioning and access management and regularly identify stale accounts, unnecessary permissions, and standing administrative access

Own device management, including MDM, endpoint security, encryption, patching, software deployment, updates, remote wipe capabilities, and device compliance

Manage the ongoing lifecycle of company hardware, including inventory, troubleshooting, repairs, replacements, warranties, recovery, retirement, and secure disposal

Partner with People on employee onboarding and offboarding, owning the technical and security components of the employee lifecycle, including accounts, permissions, device configuration, software, access removal, session and credential revocation, and hardware recovery

Work closely with the Senior Manager, Compliance & Trust to operationalize security requirements and maintain relevant technical security controls

Monitor and triage EDR and security alerts, investigate detections, identify false positives, and escalate confirmed or potentially significant incidents to the appropriate security owner

Tune security alerts and suppression rules where appropriate to reduce recurring noise and improve the effectiveness of monitoring

Serve as a first responder for endpoint security incidents, including isolating devices, collecting relevant artifacts, preserving evidence, and documenting actions taken

Participate in incident response exercises and post-incident reviews and help turn findings into concrete operational improvements

Support SOC 2, ISO 27001, cyber insurance, customer security reviews, and other compliance initiatives by producing and maintaining technical evidence such as asset inventories, endpoint coverage, patching records, access reviews, and device compliance records

Maintain accurate documentation of systems, administrative ownership, configurations, vendors, security controls, processes, and recovery procedures

Ensure critical systems have appropriate administrative redundancy and are not dependent on a single employee for access or institutional knowledge

Manage IT and security vendors, software licenses, warranties, and related operational expenses

Regularly review SaaS usage and licenses to identify unused accounts, unnecessary tools, unsanctioned software, and opportunities to consolidate or reduce spend

Package and deploy applications and identify opportunities to automate repetitive IT processes or create employee self-service where appropriate

Develop and maintain useful documentation and self-service resources for recurring employee IT issues

Assess our current IT and endpoint security environment and develop practical recommendations for improving our systems and processes as the company continues to scale

Build solutions that meet our needs today while avoiding unnecessary complexity or enterprise-level infrastructure that does not make sense for our stage

What You’ll Bring:

3–5 years of experience in IT, IT Operations, Systems Administration, Security Operations, or a similar hands-on technical role, including meaningful hands-on responsibility for security

Experience significantly contributing to internal IT operations within a growing organization, ideally within a startup or technology company

Strong experience supporting macOS in a managed environment

Strong experience with identity and access management, including SSO, MFA, user provisioning, permissions, role-based access, privileged access, and access controls

Experience administering Google Workspace, Slack, password management, and other SaaS tools commonly used within technology companies

Hands-on experience with an MDM or endpoint management platform such as Kandji, Jamf, Intune, or Workspace ONE, including building and deploying policies

Experience working with EDR or other endpoint security tooling, including reviewing detections, understanding process activity, and isolating endpoints

Working knowledge of security fundamentals, including least-privilege access, endpoint security, encryption, patching, secure employee offboarding, and incident response

Working knowledge of networking fundamentals, including DNS, DHCP, TCP/IP, VPNs, and the ability to distinguish network issues from device or application issues

Experience working within a ticketing system and managing support requests against defined response and resolution expectations

Strong troubleshooting skills and the ability to independently investigate and resolve employee hardware, software, account, access, and endpoint issues

A systems-oriented mindset with an ability to turn informal or fragmented processes into clear, repeatable workflows

Strong organizational and documentation skills with attention to the operational details that keep systems reliable and secure

Excellent written and verbal communication skills, including the ability to document technical issues and security incidents clearly for both technical and non-technical audiences

A service-oriented and patient approach to supporting employees with varying levels of technical proficiency

Strong j