IT Operations, Security Manager

envelio; Boston (MA); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Remote-friendly culture

Hybrid work in Boston

Flexible time-off

Health, dental, vision coverage

HSA with employer contribution

401(k) with match

Home-office stipend

Commuter benefits

Boston HQ

Job summary

envelio is seeking an IT Operations & Security Manager to lead U.S. information security and IT operations programs, including SOC 2, ISO 27001, device management, IAM, onboarding/offboarding, and security support for customers.

The role is hybrid with Boston, MA preferred (remote in Eastern Time Zone). Travel to Boston office quarterly. Reports to Kara Witherill, Business Operations Manager.

Qualifications

• 4+ years in information security, IT operations, or related role in a high-growth startup.
• Hands-on with SOC 2, ISO 27001, or similar frameworks.
• Experience implementing and managing MDM, IAM, and onboarding/offboarding.
• Experience administering Microsoft 365, Entra ID, and Intune.
• Strong information security practices and risk management.
• Excellent collaboration and communication across teams.
• Proactive, hands-on approach; able to build scalable processes.

Responsibilities

• Lead and evolve the U.S. information security program, including policies and risk management.
• Spearhead SOC 2 certification efforts and align with ISO 27001 standards.
• Develop and maintain audit-ready information security documentation.
• Partner with global security to align on standards and initiatives.
• Build and run security awareness training and phishing simulations.
• Respond to customer security questionnaires and support enterprise sales.
• Stay current on security landscape and identify improvement opportunities.
• Own MDM platform, IAM, onboarding/offboarding, and access governance.
• Evaluate and support security-enabled tech solutions and vendor assessments.
• Serve as the internal IT support resource for access and applications.

Skills

SOC 2

ISO 27001

MDM

Identity & access management

Security policies

Security awareness training

Communication skills

Tools

Microsoft 365

Microsoft Entra ID (Azure AD)

Microsoft Intune

Job description

About Us

envelio Inc. is a fast-growing software startup revolutionizing the utility industry. We are the U.S. arm of envelio, an award-winning clean-tech software company headquartered in Cologne, Germany. envelio is on a mission to accelerate the global energy transition.

Our flagship product, the Intelligent Grid Platform (IGP) empowers utility companies to automate and optimize hosting capacity, interconnection requests, and long-term grid investments. By enhancing efficiency, improving customer experience, and optimizing energy management, we help distribution system operators navigate the evolving energy landscape with confidence.

Learn more about us: envelio Inc Careers

About the role

As our IT Operations & Security Manager, you'll lead and build our U.S. information security and IT operations programs, ensuring our business is secure, compliant, and prepared to scale. In this highly impactful, hands‑on role, you'll lead our information security program, including SOC 2 certification, security policies, employee security awareness, and customer security support. You'll also oversee IT operations, including device management, identity and access management, employee onboarding and off‑boarding, and business technology administration.

Working closely with our global security team and cross‑functional partners, you'll establish scalable processes, strengthen our security practices, and serve as the primary resource for internal IT and security operations.

Location

Hybrid - Boston, MA preferred, or Remote (Eastern Time Zone).

Travel

Travel to Boston Office required at least 1x per quarter.

Reports to

Kara Witherill, Business Operations Manager

What you’ll do

Information Security

• Lead and evolve our U.S. information security program, including security policies, compliance initiatives, and risk management.
• Lead our SOC 2 certification efforts and support ongoing alignment with ISO 27001 standards, including gap assessments, control implementation, audit preparation, and documentation.
• Develop, maintain, and update information security policies, procedures, and audit‑ready documentation.
• Partner with our global security team to align on security standards, frameworks, and company‑wide initiatives.
• Build and deliver a security awareness training program, including phishing simulations, and conduct periodic security assessments.
• Serve as the internal security expert by responding to customer security questionnaires, supporting enterprise sales opportunities, and partnering with the Sales and Solutions Engineering teams on security‑related requests.
• Stay current on the evolving security landscape and proactively identify risks and opportunities for improvement.

IT Operations

• Own and manage our Mobile Device Management (MDM) platform, including device enrollment, encryption, compliance, and lifecycle management.
• Manage identity and access management, including user provisioning, access governance, and regular access reviews across business systems.
• Own the IT components of employee onboarding and offboarding, ensuring secure account provisioning, timely access revocation, and documented processes.
• Evaluate, implement, and support business technology solutions that improve security, productivity, and operational efficiency.
• Assess current and prospective technology vendors to ensure they meet security and compliance requirements.
• Serve as the primary resource for internal IT support, including user access, business applications, and technology‑related questions.

What you’ll bring to the team

• 4+ years of experience in information security, IT operations, or a related role in a high‑growth startup environment.
• Hands‑on experience with SOC 2, ISO 27001, or similar security and compliance frameworks.
• Experience implementing and managing Mobile Device Management (MDM), identity and access management, and employee onboarding and off‑boarding.
• Experience administering Microsoft 365, Microsoft Entra ID (Azure AD), and Microsoft Intune.
• Strong understanding of information security best practices and risk management.
• Excellent communication skills with the ability to collaborate across technical and non‑technical teams.
• A proactive, hands‑on approach and the ability to build scalable processes in a growing company.

$110,000 - $135,000 a year

The final salary offered will depend on several factors, which may include, but is not limited to relevant years of experience, educational background, industry knowledge, and technical skills.

Why Join Us?

High‑impact role in a rapidly growing tech company shaping the future of the energy transition.

Remote‑friendly culture that empowers you to do your best work from anywhere.

Flexible time‑off policy, take the time you need, when you need it.

100% covered premiums for medical, dental, and vision benefits (70% for dependents).

Health Savings Account (HSA) with employer contribution to support long‑term well‑being.

401(k) plan with up to 4% employer match to help invest in your future.

Home‑office stipend to help you work comfortably from anywhere.

Commuter benefits for in‑office commutes and business travel.

Boston HQ with opportunities to connect in person with the team.

Join us and help shape the future of clean energy!

envelio is an equal opportunity employer and is committed to fostering an inclusive and diverse workplace. We hire based on qualifications, merit, and business needs, without regard to race, color, religion, sex (including pregnancy), national origin, age, disability, sexual orientation, gender identity or expression, genetic information, veteran status, or any other status protected by law.