IT & Security Manager

VulnU; New York (NY); On-site; USD 130,000 - 135,000; Full time

Benefits offered by this job

Equity

Health insurance

401(k) match

Paid time off

Job summary

Away is seeking an IT & Security Manager to lead identity, access management, and security operations from our NYC Soho HQ. You will own Okta, drive automation, manage vulnerability life cycle, and partner with SOC to safeguard global assets while enabling scalable growth.

Join a fast-paced travel-focused team, in-office 4 days/week, with competitive compensation and equity. Must have strong communication and cross-functional collaboration skills.

Qualifications

• Minimum 4 years in information security operations, identity & access management, or IT security with an identity provider across multiple entities.

Responsibilities

• Own and maintain Okta as central identity provider and system of record for access (SSO/SCIM, RBAC, JML) across global entities.

Skills

Identity & Access Management

Okta

Information security operations

Jira Service Management

AI platform administration

Vulnerability management

Tools

Okta

Rippling

Entra

Job description

# IT & Security ManagerAway · away.aiCategory: Identity & Access ManagementLocation: NYC: Soho HQLevel: ManagerSalary: $130,000 – $135,000## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Retirement match* EquityAbout AwayAt Away, we design for the reality of travel so you can embrace the journey in full. Launched in 2016 with one thoughtfully designed carry-on, we now offer luggage, accessories, and travel essentials through ecommerce, our retail stores, and wholesale partners. The magic of travel is mirrored in the work we do to bring Away to life, and we invite you to be part of crafting what’s next.Join The CrewWe are hiring an IT & Security Manager to join our IT & Security team. This position reports to the Director, IT & Information Security and takes Away further by serving as a highly trusted technical anchor for the brand. In this role, you’ll be empowered to shape modern, resilient IT and security practices that directly protect our people, safeguard our assets, and enable our global business to scale seamlessly.What you’ll do as the IT & Security ManagerYou'll own and maintain Okta as our central identity provider and system of record for access (SSO/SCIM, RBAC, and JML) across global entities and retailYou’ll design and manage automated lifecycle workflows and access reviews via Okta Workflows and Rippling integrations to ensure continuous data integrityYou'll strengthen authentication with phishing-resistant MFA, privileged access hardening, and device-based conditional accessYou'll own the day-to-day execution of the information security program by driving the end-to-end vulnerability management lifecycle, partnering with our outsourced SOC to lead security incident triage and escalation, enforcing access-linked security awareness training, and tracking operational risk posture against functional benchmarksYou'll protect data in our collaboration platforms through SaaS backup and restore testing, OAuth and integration governance, retention and legal hold, and tiered DLPYou'll review new AI and SaaS tools for security and data handling, and keep contractors in a managed virtual desktop environmentYou'll govern our enterprise AI platforms, including seats, access tiers, token and API security, and spend, and lead fleet-wide rollout of AI client apps with the IT Operations EngineerYou'll run Service Management as a product that Logistics, Retail Ops, and other teams manage themselves, supported by SLAs, metrics, and documentationYou'll serve as the primary IT partner for People & Culture, Retail Ops, and Logistics, leading site-based IT implementations and cross-functional projects from inception to completionWho you areYou have a minimum of 4 years of experience in information security operations, identity & access management, or IT operations with a security mandate, including ownership of an identity provider (Okta or equivalent) across multiple entities or locations; Okta Certified Administrator certification or equivalent is highly preferred, but not requiredYou have a proven track record of independently managing identity infrastructure (Okta enterprise-scale) and driving cross-functional technical projects end-to-end with moderate guidanceYou've managed an identity provider (Rippling, Okta, Entra, or similar) and reconciled data across systems with discipline, planning for downstream impact before cutover. You've built automations with Okta Workflows or a comparable toolYou know data protection tooling (DLP or CASB, SaaS backup, ransomware recovery), have tested a restore, have run vulnerability management and remediation tracking, and can map operational work to a recognized security frameworkYou've administered an enterprise AI platform (e.g., Claude, ChatGPT), managing access, usage, and spend, and know endpoint management well enough to partner on fleet-wide deploymentsYou've administered a service-management platform (Jira Service Management or equivalent), including permissions, workflows, and multi-team rolloutYou're comfortable owning ambiguous, cross-departmental projects from scoping through close-out with minimal oversightYou communicate clearly in writing; this role produces documentation other non-technical teams rely on directlyYou’re creative and innovative; you love to build great new things that are fresh and unique while staying on brandYou’re agile, and motivated by a fast-paced and ever changing environmentYou’re passionate about transforming travel for all (but that’s a given!)Excited to join the team, but not sure you meet all of the qualifications? Please apply, we’d still love to hear from you.Who We AreWe’re travelers. Travel is about the journey - the transformative experiences and the growth each trip offers. All employees are encouraged to take time to get away through our variety of time away from work offerings. We’re driven. The work we do matters and collectively drives impact. No matter the job title, everyone at Away is a meaningful contributor in unlocking our ever growing potential.We’re supportive. We value the entirety of your life's journey, not just the milestones. You'll find an environment that celebrates balance, understanding that your personal passions and commitments outside of work, are threads of the same fabric that makes you unique.What We OfferOur total rewards are inclusive of both compensation and benefits. What we offer within a salary range is dependent on a number of factors, including scope and qualifications for the role, skillset, and balancing internal equity relative to other Away employees. Salary and benefit offerings are reviewed during phone screenings to ensure alignment.Compensation: $130,000.00-$135,000.00 annuallyThis role is eligible to participate in Away’s Annual Company Performance Incentive Bonus Plan, the terms of which are determined at the discretion of the companyEquity Grant: commensurate with level determined at the discretion of the companyBenefits Overview:Take care of yourself and your family through our health insurance offeringsInvest in your future by participating in our 401(k) (with a company match!)Find balance through our many paid time off programs (vacation, wellbeing, holidays, summer Fridays, and compassion leave - just to name a few!)Build your travel uniform through discount codes, product stipends, and giveawaysGive back through company-sponsored volunteer and charitable opportunitiesHow We WorkThis is an office-based position that works from our Soho, NYC office four days a week. Our working hours are 9am-6pm et, but we embrace a common-sense approach to flexibility in the workplace. It’s about being present, engaged, and balancing work with real-life needs.Our CommitmentAs a company that values diversity, equity, and inclusion, Away seeks individuals of all backgrounds and experiences to apply for this opportunity. We’re creating an environment where everyone can thrive. Our customers are global and diverse, so we’re building a team that is too. Through initiatives like our Employee Resource Groups, anti-racism training, and bias prevention initiatives, we’re building the cultural foundation that gives people the emotional and physical space to bring their authentic selves to work.EEOC Statement: Away is dedicated to hiring a diverse workplace that celebrates an inclusive culture and a sense of belonging. As an equal opportunity employer, we do not discriminate based on race, color, religion, sex (including pregnancy, gender identity, gender expression, and sexual orientation), national origin, age, veteran status, genetic information or disability. Away is committed to providing reasonable accommodations for individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or accommodation due to a disability, you may contact us at [e-mail].