IT Contractor – Security, Operations
Berry Street
contract
Posted on:
Location Type: Hybrid
Location: New York City • New York • United States
Visit company websiteExplore more
Tech Stack
About the role
- Own day-to-day **IT operations and device management**, including laptops, endpoints, onboarding/offboarding, inventory, and lifecycle management.
- Implement and manage **identity, access, and permissioning controls**, including SSO, role-based access, and access reviews.
- Execute **technical security controls** in support of HIPAA, SOC 2, and enterprise customer requirements.
- Support **SOC 2 and enterprise security remediation**, including implementing controls, coordinating evidence, and maintaining documentation.
- Implement and operate an **IT support ticketing system and service catalog** with auditable request tracking.
- Manage** IT vendors and tools**, including evaluating, implementing, and integrating platforms (e.g., MDM, IdP, ticketing).
- Partner closely with Engineering, Compliance, and external security vendors to align technical implementation with compliance requirements.
- Produce clear **system and process documentation** and ensure knowledge transfer to internal teams.
Requirements
- **3-5+ years of IT operations and/or security** experience, ideally in healthcare, healthtech, or other regulated environments.
- Experience with **device management, identity management, and access controls**.
- Experience with tools like** Electric, Kandji, Jamf, Okta, Google Workspace, Freshservice,** or similar platforms.
- You’ve supported **SOC 2 or enterprise security audits**, including remediation and evidence collection.
- You’re comfortable evaluating and implementing tools such as **MDM platforms, SSO/IdP solutions, and ticketing systems**.
- Clear, direct communicator; organized and detail-oriented.
- You prefer building and implementing systems over purely advisory work.
- Demonstrated ability to work autonomously and escalate appropriately in fast-moving environments with evolving requirements.
- Understanding of HIPAA security requirements and how they translate into real-world technical controls is a plus, but not required.
- Healthcare IT experience is strongly preferred.
Benefits
- This is a contract role, with the opportunity to convert to full-time
- 20-30 hours per week are expected, but hours may land outside that estimate based on business needs
- This role is hybrid, with 2 days per week required in our NYC office located near Madison Square Park
- The hourly pay range for this position is determined by qualifications and experience
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
IT operationsdevice managementidentity managementaccess controlstechnical security controlsSOC 2 compliancesecurity remediationsystem documentationprocess documentationonboarding/offboarding
Soft skills
clear communicationorganizational skillsdetail-orientedautonomous workescalation skillscollaborationknowledge transferproblem-solvingadaptabilitysystem implementation