Security & IT Lead for SOC 2, HIPAA & Audits

Pasito; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Pasito is hiring the first dedicated owner of security, IT, and compliance to bridge engineering, HR, legal, sales, auditors, and customers. You will run IT operations (SSO, MFA, MDM, onboarding/offboarding) and manage SOC 2, HIPAA alignment, and vendor risk while coordinating remediation with engineering.

Ideal candidates bring 5+ years in security, IT, or GRC, hands-on startup IT experience, and familiarity with tools like Vanta.

Qualifications

• 5+ years in security, IT, or GRC with full SOC 2 Type II ownership.
• Hands-on startup IT experience and familiarity with compliance automation tools like Vanta.
• Strong communication and project management skills, based in Latin America with U.S. overlap.

Responsibilities

• Run IT operations: SSO, MFA, MDM, device onboarding/offboarding, and access governance.
• Maintain Vanta, manage SOC 2 audits, HIPAA alignment, pen tests, and vendor risk assessments.
• Lead security questionnaires and work with engineering on remediation and project management.

Skills

SOC 2 ownership

IT operations

GRC

compliance automation

vendor risk management

project management

strong communication

Tools

Vanta

Job description

Pasito is hiring the first dedicated owner of security, IT, and compliance to bridge engineering, HR, legal, sales, auditors, and customers. You will run IT operations (SSO, MFA, MDM, onboarding/offboarding) and manage SOC 2, HIPAA alignment, and vendor risk while coordinating remediation with engineering.

Ideal candidates bring 5+ years in security, IT, or GRC, hands-on startup IT experience, and familiarity with tools like Vanta.