IT & Security Operations Manager

Clearstory.build

IT & Security Operations Manager overseeing IT and security operations at a SaaS company. Responsible for compliance coordination and process improvement in growing organization.

Posted 6/2/2026full-timeWalnut Creek • California • 🇺🇸 United StatesMid-LevelSeniorWebsite

About the role

Key responsibilities & impact

Manage day-to-day identity and access management - Google Workspace admin, Slack admin, AI platform administration, shared inbox management
Run employee onboarding provisioning - Day 1 account creation, checklist management, Vanta security onboarding, welcome communications, completion tracking
Run employee offboarding - access revocation, system owner coordination, equipment return, deprovisioning verification within SLA
Serve as the internal IT point of contact - password resets, hardware troubleshooting, software support, connectivity issues
Manage the asset lifecycle - laptop procurement, serial number tracking, equipment reassignment, peripherals ordering
Coordinate the annual SOC 2 audit process - project manage evidence collection, organize documentation, track control status in Vanta, follow up on remediation, and liaise with external auditors
Execute quarterly and annual access reviews, verifying active users against the employee roster, documenting findings, and remediating stale access
Manage Vanta day-to-day - dashboards, weekly compliance summaries, Trust Center access requests, failed test remediation
Monitor and drive employee security compliance - agent installs, 1Password provisioning, MFA enforcement, security awareness training
Take first pass on inbound customer security questionnaires and maintain an answer library to streamline future responses
Track and execute data governance action items from biweekly cross-functional meetings - tool policy enforcement, vendor risk monitoring, etc.
**Security & Compliance**
Coordinate the annual SOC 2 audit process - project manage evidence collection, organize documentation, track control status in Vanta, follow up on remediation, and liaise with external auditors
Execute quarterly and annual access reviews, verifying active users against the employee roster, documenting findings, and remediating stale access
Manage Vanta day-to-day - dashboards, weekly compliance summaries, Trust Center access requests, failed test remediation
Monitor and drive employee security compliance - agent installs, 1Password provisioning, MFA enforcement, security awareness training
Take first pass on inbound customer security questionnaires and maintain an answer library to streamline future responses
Track and execute data governance action items from biweekly cross-functional meetings - tool policy enforcement, vendor risk monitoring, etc.
**Business Operations**
Maintain and improve a centralized SaaS inventory - tools, seat counts, renewal dates, and costs. Keep a renewal calendar with advance notice to budget owners
Manage new software requests - intake, triage, security review routing, approval tracking, provisioning
Prepare vendor security assessments - collect SOC 2 reports, DPAs, and documentation for CTO review and approval
Support office IT and facilities - conference room AV, key fob provisioning, building management coordination
Document key processes - onboarding/offboarding runbooks, SOC 2 evidence collection guides, vendor review steps, AI usage best practices
Identify and implement automation opportunities - workflows for onboarding triggers, access request routing, renewal reminders, and offboarding checklists

Requirements

What you’ll need

4-7 years of experience in IT operations, security operations, or SaaS business operations
Hands-on SOC 2 evidence collection and audit coordination experience (not just awareness - you've done the work)
Google Workspace administration experience (security settings, groups)
Experience with compliance platforms like Vanta, Drata, or similar
SaaS vendor management experience - renewals, license optimization, procurement intake
Comfort with automation tools to streamline established workflows
The ability to work directly with a CTO on security operations without needing hand-holding on fundamentals
A builder's mindset - you'd rather create a process than follow a broken one, and you document what you build
Strong plus if you have:
Experience completing customer security questionnaires
Office or facilities coordination at a startup
MDM deployment experience

Benefits

Comp & perks

Competitive salary and meaningful equity ownership
Comprehensive health, dental, and vision coverage
401(k) plan to support your long-term financial goals
Flexible PTO and company holidays
Remote-friendly work environment with flexibility and autonomy
Opportunity to work alongside a high-caliber, mission-driven team
Career growth and leadership opportunities as the company scales

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

identity and access managementGoogle Workspace administrationVantaSOC 2 evidence collectionautomation toolsSaaS vendor managementcustomer security questionnairesMDM deploymentsecurity compliancechecklist management

Soft Skills

builder's mindsetdocumentationproject managementcommunicationproblem-solvingorganizationcollaborationattention to detailadaptabilityinitiative