Director, IT

Stepful

Director of IT building IT and security functions for Stepful's online healthcare training company. Leading SOC 2 compliance and establishing scalable IT operations for team growth.

Posted 7/15/2026full-timeNew York City • New York • 🇺🇸 United StatesLead💰 $200,000 - $250,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading security programs, including SOC 2 certification, while managing IT operations and vendor relationships. Capable of building scalable processes and systems to support organizational growth in a high-demand environment.

Highest-signal resume keywords

SOC 2 CertificationIdentity And Access ManagementMDM DeploymentVendor ManagementEndpoint Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 2 CertificationIdentity And Access ManagementMDM DeploymentEndpoint Security ToolingAccess GovernanceSecurity PoliciesAudit ManagementProcurementSpend OptimizationIncident Response

Soft Skills

Exceptional Communication SkillsStrategic LeadershipHands-On ContributorBuilder's Mindset

Tools & Technologies

KandjiJamfOktaGoogle Workspace

Industry Keywords

B2B Healthcare PartnershipsSecurity QuestionnairesVendor AssessmentsCompliance

Tech Stack

Tools & technologies

Jamf

About the role

Key responsibilities & impact

Own Stepful's security program end to end, leading our SOC 2 effort from readiness assessment through audit and ongoing compliance
Define and enforce security policies, identity and access management, and least-privilege controls across the organization (SSO, MFA, access reviews)
Support our B2B healthcare partnerships by owning security questionnaires, vendor assessments, and customer audit requests
Own the full equipment lifecycle — procurement, MDM deployment, inventory, and seamless onboarding/offboarding for every employee
Manage our SaaS application stack, including provisioning, access governance, vendor security reviews, and spend optimization
Build scalable IT support processes and serve as the escalation point for day-to-day IT needs, rolling up your sleeves while the function is small
Partner with Engineering on incident response, endpoint security, and infrastructure hardening
Define the long-term IT roadmap and build, hire, and lead the team as Stepful's needs grow

Requirements

What you’ll need

8+ years of IT experience, including experience leading IT or security functions at a high-growth startup
Hands-on experience driving a SOC 2 certification (Type I and II) from readiness through audit
Deep expertise with the modern IT stack: MDM (e.g., Kandji, Jamf), identity providers (e.g., Okta, Google Workspace), and endpoint security tooling
Proven ability to operate as a strategic leader and a hands-on individual contributor at the same time
Strong vendor management skills across hardware, software, and audit partners
Exceptional communication skills with the ability to make security and compliance accessible to non-technical teams
A builder's mindset — you're energized by creating processes and systems from scratch, not inheriting them

Benefits

Comp & perks

Meaningful Equity Stake
Subsidized Medical, Dental, and Vision insurance plan options
401(k)
FSA, HSA and commuter benefits
Open vacation policy, including:
Guidance of 15 days PTO annually
Stepful closed the last week of December
15 work-from-anywhere days
10 public holidays observed for 2026