Executive IT & Security Leader — SOC 2 & Risk Strategy

Karbon; San Francisco (CA); On-site; USD 220,000 - 245,000; Full time

Benefits offered by this job

Flexible Time Off

Company-paid medical

401(k) with company match

Work-from-home stipend

Parental leave

Job summary

Karbon is seeking a VP of IT & Security to lead internal IT, security, governance, risk, and compliance. You will own identity and access management, endpoint policies, and vendor relationships while building an in-house team from the ground up. Report to the CEO and collaborate with Engineering, Finance, Legal, and executives.

You will drive SOC 2 program execution, incident response, disaster recovery, and business continuity, with hands-on accountability and strategic roadmap ownership.

Qualifications

• 12 years in IT and security with at least 5 years in a senior leadership role.
• Proven track record building internal IT function – migration from MSP to in-house is a strong advantage.
• Hands-on operational and security experience.
• Deep familiarity with SOC 2 compliance.
• Experience in a B2B SaaS environment is strongly preferred.

Responsibilities

• Own Internal IT: device fleet, IT service delivery, helpdesk operations, incident management, SLAs during MSP-to-internal transition.
• Own identity and access management (Okta) including device provisioning and onboarding/offboarding.
• Manage endpoint management across global fleet (PCs and Macs).
• Build and manage vendor relationships, including contracts and renewals.
• Define and champion security strategy, policies, and standards; own internal security tooling stack (EDR, SIEM, email security).
• Lead the Application Security team and risk-management framework.
• Maintain SOC 2 program end to end: audit readiness, control design, auditor relations.
• Own incident response, business continuity, disaster recovery plans and processes.
• Work with CEO and executive team; support enterprise sales conversations with compliance expertise.

Skills

Leadership experience

Strategic thinking

Operational security

Compliance knowledge (SOC 2)

Executive communication

Vendor management

Team building

Tools

Okta

Entra

MDM

EDR (Jamf Protect)

Microsoft Defender for Endpoint

Azure

AWS

GCP

Google Workspace

Job description

Karbon is seeking a VP of IT & Security to lead internal IT, security, governance, risk, and compliance. You will own identity and access management, endpoint policies, and vendor relationships while building an in-house team from the ground up. Report to the CEO and collaborate with Engineering, Finance, Legal, and executives.

You will drive SOC 2 program execution, incident response, disaster recovery, and business continuity, with hands-on accountability and strategic roadmap ownership.