Security, IT & Compliance Lead - HIPAA & SOC2

OpenKrill; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote-first

USD salary

Learning budget

Team offsites

Career growth

Job summary

Pasito, the AI workspace for employee benefits, seeks a Security & IT Manager to own security, IT, and compliance end-to-end. You’ll bridge engineering, HR, legal, sales, auditors, and customers, ensuring HIPAA alignment and SOC 2 Type II readiness as Pasito serves major carriers and brokers.

This senior role emphasizes hands-on IT operations, IAM governance, Vanta/Drata/Secureframe experience, and strong English communication.

Qualifications

• 5+ years in security, IT, or GRC with end‑to‑end SOC 2 Type II ownership.
• Hands-on IT operations at startup/growth-stage with IAM, SSO, MDM, SaaS administration.
• Experience operating a compliance automation platform (Vanta, Drata, or Secureframe).
• Ability to read a pen-test report, judge severity, and work with engineers on remediation.
• Strong project-management skills with clear ownership and deadlines.
• Excellent written and spoken English communication; organized and deadline-driven.
• Based in Latin America with strong overlap with U.S. business hours.

Responsibilities

• Own Pasito's security, IT, and compliance program end-to-end.
• Collaborate with legal, HR, sales, auditors, and customers.
• Manage identity and access governance, SSO, MFA, and least-privilege architecture.
• Lead audit preparation, evidence collection, and annual SOC 2 Type II cycle.
• Drive policy updates, risk reviews, and security training across teams.
• Oversee IT footprint, device management, and vendor risk assessments.

Skills

Security management

IT operations

GRC

Compliance tooling

Pen-test literacy

Project management

English communication

Startup experience

Remote collaboration

Tools

Vanta

Drata

Secureframe

Job description

Pasito, the AI workspace for employee benefits, seeks a Security & IT Manager to own security, IT, and compliance end-to-end. You’ll bridge engineering, HR, legal, sales, auditors, and customers, ensuring HIPAA alignment and SOC 2 Type II readiness as Pasito serves major carriers and brokers.

This senior role emphasizes hands-on IT operations, IAM governance, Vanta/Drata/Secureframe experience, and strong English communication.